Security & data · plain language
How your POS data is kept safe, without the badge wall.
What we do with your shop's data, what you should do, and what we do not claim. No certification logos we have not earned.
Where it is hosted
SmartPOS is hosted by us on our own servers, not on your shop computer. You reach it over an encrypted HTTPS connection from any browser.
Backups
Your business data is backed up automatically every day to separate storage, so a broken tablet or a flooded shop does not lose your sales, stock or customers.
Who can see what
Each user has their own login and a role that decides what they can see and change. Managers can be limited to their own location. Deactivate a user the day they leave.
Card data stays out
Card payments run on your processor's device or app. Full card numbers never enter SmartPOS; we record the amount and method against the sale.
Your data is yours
Export products, customers, sales and reports to spreadsheets at any time. If you leave, you take it with you.
If something goes wrong
If we ever find a breach that affects your data, we tell you without undue delay, with what happened and what to do.
What we do not claim
- PCI DSS certification of our own (card data is handled by your processor)
- SOC 2, ISO 27001 or similar audits
- HIPAA compliance (which is why the pharmacy edition is a waitlist)
- Country fiscal or e-invoicing certification, apart from the ZATCA add-on for Saudi Arabia
Your part
- Give every staff member their own login; never share the admin account
- Use strong passwords and change them when staff leave
- Keep tablets and PCs updated and locked when unattended
- Use your processor's card terminal, not typed card numbers
Report a security issue
Tell us what you found and how to reproduce it. We reply within business hours.
FAQ · 8
Security questions
-
01Is my POS data safe if my tablet breaks?
Yes. Your data lives on our servers, not on the device, and is backed up daily. Log in from another device and carry on.
-
02Is SmartPOS PCI certified?
We do not claim PCI certification of our own. Card payments are processed by your card processor on their device or app, so full card numbers never enter SmartPOS.
-
03Who at SmartPOS can see my data?
Only support staff who need to, when you ask for help or to keep the service running, and only for that purpose.
-
04Can I export all my data?
Yes. Products, customers, sales and reports export to spreadsheets at any time.
-
05Do you sell my data?
No. We do not sell or share your business data or your customers' data. See the privacy policy.
-
06How do I report a security problem?
Use the contact form marked "security", or the email button below. We reply within business hours.
-
07Can I limit a manager to one store?
Yes. Assign users to locations and roles so they only see their own store.
-
08What happens to my data if I cancel?
Export it before you cancel. After cancellation the account is kept for 30 days in case you return, then deleted.
-
No question matches that. Ask us directly and we will answer within business hours.
Ask a question
Your data, backed up from day one.
Start the trial; every sale is saved on our servers, not your tablet.
