Security Overview

TableGreet Services are hosted on secure, enterprise-grade cloud databases and servers provided by Supabase and backed by Amazon Web Services (AWS). The datacenters comply with standard certifications including ISO 27001, SOC 2 Type II, and PCI-DSS.

Our physical infrastructure resides within high-security facilities guarded by automated access control systems, biometric verification, closed-circuit security cameras, and 24/7 on-site guards.

We secure all customer and guest transaction data at every stage of the lifecycle:

• In Transit: All data transmitted between user web browsers, mobile devices, admin panels, and our APIs is encrypted using TLS 1.3 (Transport Layer Security) with modern cipher suites.
• At Rest: Databases, configuration assets, and backups are encrypted at rest using industry-standard AES-256 (Advanced Encryption Standard) encryption keys managed securely by our cloud hosting infrastructure.

TableGreet provides robust access control parameters to protect administrative dashboards:

• Role-Based Access Control (RBAC): Managers can restrict team access to venues, menus, pricing, analytics, and billing through customized granular user roles (Admin, Editor, Staff, Viewer).
• Multi-Factor Authentication (MFA): Admin account panels support Multi-Factor Authentication to block unauthorized logins.
• Single Sign-On (SSO): Max and Enterprise tiers support custom SAML / OIDC integration for corporate workspace compliance.

TableGreet operates fully integrated tableside guest ordering and payment options. We protect cardholder data through strict isolation:

No credit card, debit card, or payment credentials touch our servers or are stored in our databases. All transaction details are processed directly by our secure payment gateway partner, Stripe, Inc., which is certified as a PCI-DSS Level 1 Service Provider (the most stringent level of security in the payments industry).

A. Software Development Life Cycle (SDLC): Code modifications are subjected to automated dependency scans, static analysis checks, and manual peer review before being merged and deployed to production servers.

B. Backups: Automated database snapshots are taken nightly. Backups are stored in isolated, geographically redundant storage targets, fully encrypted at rest, and checked regularly for data integrity and recovery speed.

C. Network Protection: We use Cloudflare to filter network requests, block DDoS attacks, intercept SQL injection attempts, and monitor anomaly vectors at our edge limits.

We welcome reports from security researchers and customers to keep our systems secure. If you discover a potential vulnerability in our services, please submit a detailed report to our security response team: