Your data,
locked by design.

• 

  Where your data lives

  • STAK runs on servers in Frankfurt, Germany (European Union).
  • Daily backups are kept for 35 days and monthly backups for 12 months, all copied to Ireland (European Union).
  • The backups are locked: they cannot be deleted before their time, not even by us.
  • The database can be restored to any point in time within the last 35 days.
• 

  Encryption

  • Every connection is encrypted in transit; the app talks to the database over TLS 1.3 with full certificate verification.
  • The database, the disks and your files are encrypted at rest with managed keys.
  • Secrets, such as service keys, live in a managed vault and are never written into the code.
  • Sensitive records, such as staff files and clinic notes, are encrypted one by one.
• 

  Isolation and permissions

  • Every business is isolated at the database level, on every table, so no business can ever see another’s data.
  • The app uses a least-privilege database user, and the database sits on a private network never open to the internet.
  • Roles and permissions on every action, scoped by branch.
  • An append-only audit log: actions are recorded and never erased.
• 

  Who gets in, and how

  • Sign in with Google, with passkeys or with a 6-digit code sent to your email.
  • Shared staff screens (the till, the kitchen) use a PIN per person, never a shared password.
  • If you ask STAK’s team to help set things up, it is with your consent, for a limited time, with an audit log you can see, and never with payment secrets.
  • Autopilot follows the permissions, approval modes and limits you choose. Its activity log shows what happened and whether each action can be undone.
• 

  Your money and your accounts

  • You connect your own payment provider, bank and WhatsApp in your own name. Your customers’ money settles straight to you and never passes through STAK.
  • A ledger that cannot be edited: posted money is corrected by reversal, and periods lock.
  • We store no card for automatic charges: STAK’s own bill is paid by a payment link each period.
• 

  Your rights

  • Export your data at any time. When you leave, your data stays available for export as our terms describe.
  • The data processing agreement and the list of sub-processors are published in the legal set.
  • The service level agreement states the uptime we commit to and the credits when we fall short.

Security questions: write to [email protected]. We answer within 2 working days. The binding text is the security overview and the data processing agreement.