Exactly what runs, where, and why.
Every row on this page is read live from the running backend. Marketing does not touch it. When Stripe is in test mode, this page says test mode. When SendGrid is missing a key, this page says missing. If you see green, it means the corresponding environment variable or code path was verified within the last second.
Snapshot taken Aug 31, 2026, 6:13 PM. Refresh to re-check.
Every core module, live.
The floor is not negotiable.
Each operation is housed in its own isolated database. Your financial data is never shared or mixed.
All sensitive POS tokens and keys are Fernet-encrypted at rest and in transit.
Automated daily backups and 99.9% uptime architecture.
Every claim on this platform is auditable.
Audit Iteration 57: 100% Logic Pass.
Our automated audit exercises every core code path with real database writes, not mocks. Recipe cost math, roster export, invoice ingestion, payment lifecycle, and inventory ledger all pass end to end against a live Mongo instance.
Third-party services, current state
Live mode. Real cards are charged.
Invoice photos are read by GPT-4o vision through the Emergent LLM key.
Weekly digest and order-request emails are sent via SendGrid.
Adapter is deployed. Each user connects with their own Square access token; tokens are Fernet-encrypted at rest.
Adapter is deployed. Each user connects with their own Toast access token; tokens are Fernet-encrypted at rest.
Adapter is deployed. Each user connects with their own Clover access token; tokens are Fernet-encrypted at rest.
How your data is held
TLS 1.3 on every public endpoint (terminated at the Kubernetes ingress).
JWT stored in an httpOnly, secure cookie. Passwords hashed with bcrypt. Impersonation writes an admin audit log.
Every read and write query filters by the authenticated user's account id. No cross-account leakage in the shared-cluster tier.
Square, Toast, and Clover access tokens are encrypted with Fernet (AES-128-CBC + HMAC-SHA256) keyed to the platform JWT secret. Only the last four characters are ever returned to the frontend.
Point-in-time BSON dumps are taken before every schema migration. Automated nightly backups are on the roadmap and not yet running.
Numbers you can reproduce
Every unit conversion is deterministic. Given the same ingredients, yields, and prices, the recipe cost is identical between runs. No randomness, no rounding drift.
Quarter-close snapshots freeze recipe cost, margin, and menu composition. Once locked, a snapshot cannot be edited, only appended to.
Sales, waste, comps, and staff meals write into a single ledger with immutable timestamps. Deductions never edit the source sale row.
Security disclosures welcome. We aim to acknowledge within one business day.
Environment: production. Every field on this page is derived from a live environment probe.