We put security at the heart of everything we offer at Alcashier. We continually work to apply the latest protection technologies to keep your data safe, and we work with information security experts to ensure we meet the highest standards of security, privacy and compliance.
Secure software development
Throughout every stage of developing the Alcashier platform, we give top priority to the security of user data. Our team follows a rigorous approach that combines manual and automated testing to assess data security and discover vulnerabilities, helping us identify potential weaknesses and address them proactively. This comprehensive approach ensures the system is built to the highest security standards from the start, following quality assurance best practices at every step.
Data transmission and encryption
Our commitment is not limited to providing a smooth POS and e-invoicing system; we also give top priority to the security of your data. Information is secured by encrypting data in transit using the TLS protocol, and at rest, protecting it from unauthorized access. The Alcashier platform, on web and mobile, also relies on encrypted connections through HTTPS/SSL certificates, in addition to strong 256-bit SSL encryption, the same level used by banks and sensitive institutions to ensure the highest degree of protection for your data.
Employee training
Security is a core aspect that involves every member of the team. All Alcashier employees undergo regular cybersecurity training and assessments to ensure best practices are followed when handling user data. Alcashier employees can access customer data only when absolutely necessary to provide support, and after obtaining explicit permission from the user.
System operation and data storage
Our hosting provider holds AICPA, SOC 2 Type II and SOC 3 Type II certifications, among others. Through successful compliance with this internationally recognized framework of information security controls, our hosting provider demonstrates its commitment to protecting both confidential customer data and company data.
Backup and data recovery
Your data is backed up daily with a recovery point objective (RPO) of 24 hours, and is securely encrypted in multiple locations for added protection. Backup procedures are regularly tested and reviewed to ensure the service works with full efficiency. We follow a proactive approach that includes rigorous backup and data recovery protocols, enabling us to respond quickly and effectively to unexpected events.
Payments
Alcashier strictly complies with the Payment Card Industry Data Security Standard (PCI DSS) to ensure the highest levels of security in payment transactions. By applying strict procedures and protocols, we protect sensitive payment card information during transactions. We also rely on Stripe, which is designed to encrypt and protect data at every stage, from transmission through to storage.