Security & privacy
Trust is the product. Here’s exactly how isot handles money, data and your guests.
We never touch the money
No in-app payment, no card data stored or transmitted by isot. Guests pay your server in person — cash or your existing terminal. Your PCI scope doesn’t grow.
Your guests & data are yours
isot is your channel, not a marketplace. Order history, staff reports and the activity log belong to your venue and download as CSV, any time.
KVKK & GDPR-aligned
Data minimisation by design: no card data, and guests order with no sign-up. For access or deletion requests, email security@isot.app.
Encrypted in transit & at rest
TLS everywhere, encrypted storage, role-based access with per-staff PINs, and an activity log of staff actions in the owner console.
Resilient by design
The floor keeps working through brief network blips; orders reconcile automatically when the connection returns.
Legal or security questions? Email security@isot.app