How your data is protected
In transit and at rest. All traffic uses HTTPS. Data is encrypted at rest by our infrastructure provider.
Access control. Access is role-based. A cashier sees the billing screen; a manager sees their branch; an owner sees the business. Data is scoped by organisation, so one customer’s data is never reachable from another’s account.
Authentication. Accounts are individual, not shared. Sessions are managed by the platform, and passwords are stored hashed, never in plain text.
Backups. Data is backed up automatically by our infrastructure provider.
Monitoring. Errors and unusual behaviour are logged and monitored so problems are visible rather than silent.
The desktop till and Local Hub
Branches can run a desktop till with a Local Hub that coordinates devices over the branch’s own network. The Hub is reachable only on the local network and requires a registered branch credential — it is not exposed to the internet.
Your responsibilities
Security is shared. Give each person their own login rather than sharing one, remove access when someone leaves, use the roles rather than giving everyone owner access, and keep branch devices updated.
Reporting a vulnerability
If you believe you have found a security issue, email admin@aesoni.in with enough detail to reproduce it. Please do not publish it publicly before we have had a chance to fix it.
We will acknowledge within 3 business days and keep you updated.
Compliance
We align our handling of personal data with the DPDP Act 2023. See our Privacy Policy.