Security & trust

Trust & security

Your winery's data, handled with care.

SipsPOS runs your tasting room, club, and customer list — so we keep security tight and transparent. Here's how your data is protected and who touches it.

Your data is yours

Export your products, customers, employees and bookings to CSV anytime from the Import Center — no lock-in.
Each winery's data is isolated and scoped to its own account; one winery can never see another's.
Month-to-month. Cancel and take your data with you whenever you like.

Payments

Card payments are processed by Square and Stripe — PCI-DSS certified providers.
We never store full card numbers. Cards on file (for wine club) are tokenized and held by the processor, not by us.
Each winery connects its own processor account, so funds settle directly to you.

Access & accounts

Staff sign in with per-person PINs and role-based permissions (cashier / manager / admin).
Sensitive actions (like comps) require a manager PIN override and are recorded.
Optionally restrict back-office access to trusted networks with an IP allowlist.
Passwords and PINs are stored only as salted hashes, never in plain text.

Reliability & backups

Hosted on managed cloud infrastructure with encryption in transit (HTTPS) and at rest.
The database is backed up automatically by our managed provider.
The register keeps working offline and re-syncs when the connection returns — a busy Saturday never stalls.
Live system status is always at /status.

Privacy & compliance

We handle personal information in line with applicable privacy law, including PIPEDA in Canada.
Marketing emails include an unsubscribe link and honor opt-outs (CASL).
Built-in tooling helps you meet liquor and DTC shipping requirements in your market — provincial rules and liquor-board reporting in Canada, state permits, a 21+ date-of-birth gate on shipped orders, and TTB worksheets in the US.

Sub-processors

Cloud hosting & managed database (application + data).
Square & Stripe (payment processing).
Email delivery provider (transactional & marketing email).

Report a concern

Found a vulnerability or have a security question? Email security@sipspos.com and we'll respond promptly. Please don't publicly disclose an issue before we've had a chance to address it.