Security

How sign-in works

The till uses a business code and a 4-digit PIN. The owner uses an email and a password. PIN hashes are not returned by the API. Sign-ins, refunds, voids, product changes, role changes, and SAF-T exports are written to an audit log for that business.

Staff roles are manager, cashier, and accountant. The owner login is separate.