Is my cafe’s data secure with GetCafePOS?
Data is encrypted in transit over HTTPS, separated per business, protected by role-based staff permissions, and backed up daily off the main server. Card numbers stay with your payment processor.
Cafe POS data security, without the jargon
Your sales, menu and customers are stored for your business only, sent over encrypted connections, guarded by staff roles, and backed up every day off the main server. Card numbers never land in GetCafePOS — your processor handles them. We don’t claim certifications we don’t hold.
Six layers around your data
Where your data lives
Your cafe’s data — menu, sales, customers, staff — is stored in a database on servers operated for GetCafePOS. Each business is kept separate from every other business in the system.
In transit
The register, back office and online store are served over HTTPS, so data between your device and the servers is encrypted.
Who can see what
You decide each staff member’s role and locations. A barista can take orders without seeing reports, refunds or other shops.
Card data
Card numbers are handled by your payment processor and its terminal. GetCafePOS records that a payment happened, the amount and the method — not the full card number.
Backups
Databases are backed up automatically every day and backups are kept off the main server, so a hardware failure does not cost you your history.
Your data, your exit
Export products, customers and reports to spreadsheets whenever you want — including if you decide to leave.
What we don’t claim
GetCafePOS does not currently hold PCI DSS, SOC 2, ISO 27001 or similar certifications, and this page does not imply that it does. If your business needs one of those for a contract, ask us on a demo what we can document today.
Report a security issue
Found something? Tell us privately and give us a chance to fix it before sharing it publicly.
Security questions
Answered by the GetCafePOS team. Can’t find yours? Ask us.
Is GetCafePOS PCI certified?
We do not claim a PCI certification. Card data is captured by your payment processor’s certified terminal, which keeps full card numbers out of GetCafePOS. Ask your processor for its PCI documentation.
Who can access my data?
You and the staff you give access to. Our support team can access your account only to help you when you ask, and access is logged.
Can I export or delete my data?
Yes. Export from the back office any time. If you close your account, ask us to delete your data and we will confirm when it is done; see the data request page.
What happens if a register tablet is stolen?
Change that staff member’s password and sign the device out from the back office. Nothing is stored only on the tablet — your data stays in your account.
Do you sell customer data?
No. Your customers’ details are yours. We do not sell them or use them for anyone else’s marketing.
How do I report a security problem?
Use the “Show email” button below to reach the security contact. Tell us what you found and how to reproduce it; we reply within one business day.
Your data, kept like the house blend
Start a trial and look at the staff roles, backups and exports yourself before you move a single customer.
30-day free trial · no card · no contract
