How we keep your data safe
Your menu, orders and guests' details are yours. Here is what we do to protect them, in plain words.
Trusted hosting
The website runs on Vercel. The database and files run on Supabase (managed PostgreSQL) in Frankfurt, Germany.
Encrypted everywhere
Every connection uses HTTPS. Data is encrypted at rest by our hosting providers, and passwords are stored hashed, never readable by anyone.
Each restaurant is walled off
Every record belongs to one restaurant. The database itself checks every request (row-level security), so one restaurant can never see another's data.
Nightly backups
We make an encrypted backup of the database every night, so your menu and orders can be restored if something goes wrong.
Safe sign-in and roles
Passwords must be at least 10 characters. Staff get only what their role needs: owner, manager, cashier or kitchen. Public forms are rate-limited to stop abuse.
No card numbers stored
We never see or store card numbers. Subscription payments go through our payment provider's secure hosted checkout.
Careful staff access
Our team signs in with two-factor authentication, and every admin action is recorded in an audit log.
Found a problem?
If you think you've found a security issue, please email us. We'll reply quickly and keep you updated.
hello@restumenu.com