Security

Your data is safe with us

Tillstock is built with security as a first principle — not an afterthought. From encryption to audit logs, every layer of the platform is designed to protect your business data.

Encrypted everywhere

Every connection to Tillstock uses HTTPS, and your data is encrypted at rest on Amazon Web Services.

HTTPS onlyEncrypted at restHosted on AWS

Role-based access

Every person gets a role. Custom roles let you decide exactly what each team member can see and do, and the server checks it on every request.

4 built-in rolesCustom rolesChecked on the server

Audit log

Every change in your account — what was created, updated or deleted — is recorded with who made it and when.

Who & whenEvery changeRead-only

Your business, kept separate

Each business’s data is kept apart from every other’s, and every request is checked against the business it belongs to.

Per-business isolationManaged AWS services

Your data is yours

We never sell your data and use it only to run Tillstock. Export your products, stock and reports to CSV whenever you like.

No data sellingCSV export

Secure sign-in

Sign-in runs on Amazon Cognito. Every account can turn on two-factor authentication with an authenticator app.

Amazon CognitoTwo-factor sign-in

Security practices we follow every day

  • Permissions are enforced on the server, not just hidden in the app
  • Every change is built and tested automatically before it goes live
  • Dependencies are scanned and kept up to date automatically
  • Secrets live in AWS, never in source code
  • Access to production goes through single sign-on
  • Suspended accounts lose access straight away

Questions about your data?

You own everything you put into Tillstock. We process it only to run the service on your behalf. Ask us at any time for a copy of your data, or to delete your account and everything in it.