Security
- Every person sees only what their role allows, enforced in the database itself.
- Data is encrypted in transit and at rest, and our database is hosted in Canada.
- Store tablets hold no money data and are paired to one store.
- Found a problem? Tell us and we will look at it right away.
1. Access by role
Brand HQ, store owners, managers, staff and tablets each have their own role. Access rules are enforced in the database on every request, not only in the app, so one store can never read another store's data, and a brand never sees a franchisee's staff files unless the franchisee shares them.
2. Sign-in
- Only invited people can sign in: by email and password, an email sign-in link, or Google.
- Brand HQ, stores and employees each sign in through their own door.
- Store staff use a personal PIN on a paired tablet, never a shared password.
3. Data protection
- Encrypted in transit (TLS) and at rest.
- Database and uploaded files hosted in Canada.
- Photos and documents are stored privately and opened only through short-lived links.
4. Store tablets
A tablet is paired to one store by a manager and can be unpaired at any time. It never shows sales, wages or costs. Each action is signed with the PIN of the person who did it.
5. Our own access
AIO staff do not open a brand's sales, wages, timecards or contracts unless the brand starts a support session, and the brand can see each session in its log.
6. Service providers
We use established providers for hosting, email, payments and invoice reading, listed in our Privacy Policy, each under contract.
7. Reporting a vulnerability
Email info@aio-agency.ca with the details. Please give us time to fix the issue before sharing it. We do not take legal action against good-faith research.