Staff, roles and security
PIN sign-in at the till, roles and per-module permissions in the back office, limits per operator, paired devices, attendance and a tamper-evident audit trail.
Everyone sees only what they should. Every action leaves a trace.
01
Limits per person
Discount cap, refunds, reprints, price overrides and goods approval set for each operator.
02
Tamper-evident audit
A hash-chained audit trail with an integrity check, so an edited entry shows.
03
Devices you control
Tills pair with a one-time code and can be revoked or signed out from the back office.
Everything in staff, roles and security
18 featuresAt the till
- Sign in with user and PIN
- PINs stored as Argon2id hashes
- Manager PIN for shift close, comps and resets
- Attendance punch-in and punch-out
- Shift hand-off to another person
- Till modes by role
In the back office
- Admin, manager, cashier and custom roles
- None, view or edit per module, scoped by outlet
- Till operator accounts tied to outlets
- Per-operator discount cap, refund, reprint, price override and goods approval
- Strict or rollout mode for outlet sign-in
Devices and audit
- Pair a till with a one-time code
- Revoke a terminal
- See and end active till sessions
- Terminal licence limits
- Hash-chained audit trail with integrity check
- Bill-number gap audit
- Local data encrypted at rest
See it on your own menu.
We load your menu or catalogue and walk you through a busy hour, the day close and the reports.