What actions are always audit-logged?

Voids, refunds, discounts, comps, supervisor overrides, staff profile changes, leave balance adjustments, timecard edits, stock reversals, and nightly automation runs are all audit-logged.

Is data separated between locations for security?

Yes — all data is scoped by location at the API level. A manager assigned to Location A cannot access Location B's data even if they know the URL.

Security & roles

Available

Granular permissions, PIN-based access, supervisor overrides, and an immutable audit trail keep sensitive actions controlled without slowing anyone down.

What it does

Back-office roles: Admin (full access, all outlets), Manager (assigned outlets, daily ops), Staff (limited view).
POS roles: four built-in roles (Owner, Manager, Cashier/Server, Staff) plus custom roles with granular permission keys.
PIN login at the POS — 4-digit, hashed — so staff never see each other's credentials.
Supervisor PIN override: when a staff member lacks a permission (void, refund, discount, split, etc.), a manager enters their own PIN to authorize just that action; approver name is recorded.
Immutable audit log: every significant action — POS voids, refunds, discounts, staff edits, leave changes, cron jobs — is written server-side and cannot be edited from the UI.

FAQ

Yes — in the Dashboard under POS Roles & Permissions, create a custom role and select exactly which permission keys to grant. Assign it to any staff member.

Was this helpful?

Security & roles

What it does

FAQ

Related