Security
Your data is safe with us
Tillstock is built with security as a first principle — not an afterthought. From encryption to audit logs, every layer of the platform is designed to protect your business data.
Encrypted everywhere
Every connection to Tillstock uses HTTPS, and your data is encrypted at rest on Amazon Web Services.
Role-based access
Every person gets a role. Custom roles let you decide exactly what each team member can see and do, and the server checks it on every request.
Audit log
Every change in your account — what was created, updated or deleted — is recorded with who made it and when.
Your business, kept separate
Each business’s data is kept apart from every other’s, and every request is checked against the business it belongs to.
Your data is yours
We never sell your data and use it only to run Tillstock. Export your products, stock and reports to CSV whenever you like.
Secure sign-in
Sign-in runs on Amazon Cognito. Every account can turn on two-factor authentication with an authenticator app.
Security practices we follow every day
- Permissions are enforced on the server, not just hidden in the app
- Every change is built and tested automatically before it goes live
- Dependencies are scanned and kept up to date automatically
- Secrets live in AWS, never in source code
- Access to production goes through single sign-on
- Suspended accounts lose access straight away
Questions about your data?
You own everything you put into Tillstock. We process it only to run the service on your behalf. Ask us at any time for a copy of your data, or to delete your account and everything in it.