Your venue’s data, handled seriously.
A point of sale holds your sales, your staff and your guests. Here is what Kessl does to protect them, in plain terms.
ACCESS
The right people see the right things.
- ✓Role-based access: owner, manager, cashier, server, kitchen and runner, each limited to what the job needs.
- ✓Staff sign in with a PIN. Repeated wrong PINs lock the account, and sign-in attempts are rate limited.
- ✓Staff passwords are stored hashed, never in plain text.
- ✓Each venue’s data sits in its own account, so one customer never sees another’s.
CONTROL
Sensitive actions need a manager, once.
- ✓Voids, refunds, discounts and drawer closes can require a manager PIN on the spot.
- ✓Each manager approval is good for one action and expires after two minutes, so it can’t be reused later in the shift.
- ✓Changes to venue settings are recorded in an audit log.
- ✓Tips are kept separate from sales and from the till, with their own payout record.
PAYMENTS
We stay out of your card data.
- ✓Card payments are taken on your own terminal with your own provider. Kessl records the payment against the check.
- ✓Kessl does not store full card numbers.
- ✓Totals and balances are calculated on the server, so a device can’t change what a check owes.
RESILIENCE
Built to survive a bad connection.
- ✓Every iPad keeps recording orders and payments on its own when the internet drops, then syncs without re-entry.
- ✓Duplicate and replayed sync messages are detected and ignored, so a retry never double-charges a check.
- ✓Kitchen and bar tickets print over your own network.
OPERATIONS
Monitored, backed up, recoverable.
- ✓Production databases are backed up every night, encrypted, with 30 days of history kept off the server.
- ✓The platform is checked automatically every hour for disk, memory, backup age and failed services.
- ✓Server errors are captured with a request ID, so a problem you report can be traced to the exact event.
- ✓Connections to the cloud use HTTPS, and the web app sends standard security headers.
DATA
Your data is yours.
- ✓Sales, menu, staff and guest data belong to you.
- ✓Export as CSV on request, with access after the contract ends.
- ✓Guest data is used to run your venue and your loyalty programme, nothing else. See the privacy policy.
Company and compliance
- Legal entity
- [Legal company name to be confirmed]
- Company number
- [Companies House number to be confirmed]
- Registered office
- [Registered address to be confirmed]
- Data-protection registration (ICO)
- [ICO registration number to be confirmed]
- Hosting
- [Hosting provider and region to be confirmed]
- Data-processing agreement
- [DPA availability to be confirmed]
Questions from your IT or procurement team, or a security concern to report? Email hello@61westlabs.co.uk. See also our privacy policy and terms.