Verified Data Protection

Security & Data Ownership

Practical safeguards engineered for everyday business realities: local data sovereignty, secure cashier authentication, and full data portability.

Implemented

Local Database Sovereignty

Your business transactions, product catalog, customer directories, and daily sales records live locally on your computer inside an embedded SQLite database. Your business data remains your property on your premises.

Implemented

Argon2id Staff PIN & Password Hashing

Staff PINs and manager credentials are mathematically hashed with Argon2id (memory-hard, brute-force resistant) before touching disk. Plaintext passwords or PINs are never stored in the database.

Implemented

Role-Based Cashier & Manager Permissions

Staff access is strictly segregated into Cashier, Manager, and Admin roles. High-risk counter actions—such as line voids, refunds, manual discounts, and cash drawer opens without a sale—require manager PIN approval.

Implemented

OS Keychain Credential Storage

Cloud sync tokens and API secrets are stored within the native operating system vault (Windows Credential Manager) via Rust system bridges, preventing plaintext exposure in config files.

Implemented

Local & Cloud Disaster Recovery Backups

OneScale enables direct local database backup exports to USB drives, alongside automated encrypted cloud backups when internet is active, so you can restore your shop operations immediately if a machine fails.

Implemented

Full Data Portability & CSV Export

No proprietary vendor lock-in. Store owners can export complete product catalogs, customer histories, inventory adjustments, and sales ledgers to standard CSV and Excel formats at any time.

Implemented

Opt-In Error Diagnostics with PII Scrubbing

Crash and diagnostic reporting is strictly opt-in. When enabled by the owner, automated scrubbers strip customer phone numbers, names, and card details before any telemetry leaves the device.

Implemented

Encrypted Cloud Transport (TLS 1.3)

All background cloud synchronization between local registers and the web back-office is transmitted securely over TLS 1.3 HTTPS channels with verified certificates.

Our Core Operational Commitments to Store Owners

Zero Lock-in Guarantee

Your customer records, inventory quantities, and sales logs can be exported to standard Excel / CSV sheets at any time.

No Advertising Monetization

We never sell, rent, or share customer contact numbers or transactional data with third-party advertisers or marketing brokers.

Local Hardware Control

Your POS software continues operating and printing receipts locally even if your internet connection goes down for days.