Where your data actually lives
A cannabis store hands over more sensitive information than most retail - ID numbers, delivery addresses, purchase history. Here is what happens to it.
Your data, on your own servers
Every store runs on its own dedicated servers and database - not a shared multi-tenant pool. Your data is never pooled or shared with any other client on the platform.
Access is role-based, not shared
A cashier's login doesn't see what an owner's does. Roles are scoped per person and per store, so a manager at one location doesn't automatically see another location's numbers, staff, or settings.
Every action is logged
Sales, stock adjustments, and admin changes write to an audit trail rather than disappearing once the screen changes - the record of who did what stays intact and exports to PDF.
Nothing is locked in
Every table and report - stock, orders, vendors, consignment balances, cash-up - has one-click CSV or PDF export, pulling the full dataset rather than just the visible page. Self-service data export and account deletion are both built in.
Built on Supabase
Authentication, database, storage, and real-time updates run on Supabase's managed infrastructure rather than a homegrown backend - production-grade hosting from day one, not something assembled after the fact.
Compliance, built into the product
- Age-verification gate before storefront access
- ID verification online and at the in-store till
- Prescription tracking with Meditrac
- POPIA-aligned consent, versioned and timestamped
- Sequential, SARS-compliant invoice numbering
- Configurable data retention, with logged retention runs
What this page is, and isn't
This is a plain description of what the platform does today, not a compliance certificate. It isn't a substitute for your own legal or security review before you sign anything - if your business has specific requirements, ask us directly rather than assuming from this page.
Have a specific security question?
Ask us directly rather than guessing from a features page - we would rather answer it properly than have you assume.