Security
Your records, kept safe
A till holds your takings and your guests' orders. Here is how we look after them, in plain words.
Encrypted on every till
Each till keeps its copy of your menu and orders in a database encrypted with a random 256-bit key, held in the device's own secure store (Android Keystore, Apple Keychain, Windows DPAPI). The key never leaves that device, and tills can't be cloned from a phone backup.
Encrypted on the way and at rest
Everything between your devices, guests' phones and our servers travels over HTTPS. Our database provider encrypts data at rest and takes daily backups.
Strong sign-in
Owners and managers sign in with a passkey, Google, Apple or a password, and owners use two-step sign-in. Each new way to sign in is emailed to you. Staff use their own PIN on the till, stored only as a secure hash.
Each person sees what their role allows
Roles and permissions decide who can void, discount, refund, see reports or change settings. Several restaurants and branches stay apart.
A record of who did what
Voids, discounts, refunds and setting changes are recorded with who did them and when, and things worth a look go to a review list for managers.
Support only when you allow it
Tillmora support can't see your back office unless the owner allows it, for 24 hours or 7 days, read-only. Everything support views or does is listed for you. Emergency access is limited, recorded and shown to you.
Guests' details kept to a minimum
Table QR ordering needs no name. Abuse checks keep a network address only as a scrambled code for a day. Guests can ask a restaurant to erase them; their names come off every order, while the bills a restaurant must keep for tax stay.
Your data stays yours
Download everything at any time from Settings › Your data. Card details never touch Tillmora: they go straight to Stripe or Razorpay.
Where your data is
Tillmora's database runs on Supabase in Mumbai, India. Pages are served through Cloudflare. The full list of providers, what each does and where, is on Sub-processors, and how we handle personal data is in the Privacy policy.
Found a security problem? Write to support@tillmora.com with "Security" in the subject.