Security

How BuiltPOS™ and its companion apps protect the businesses that run on them.

  • Card numbers stay with the processor

    The card terminal and the processor handle the card. BuiltPOS™ does not store card numbers.

  • Encrypted connections

    All connections to the BuiltPOS™ cloud use TLS encryption.

  • Protected credentials

    Passwords are hashed with bcrypt. Sensitive settings such as API keys are encrypted with AES-256-GCM.

  • Nightly backups

    Store data kept in the BuiltPOS™ cloud is backed up every night, encrypted.

  • Roles and manager approval

    Owners, managers, shift leads and cashiers get the access they need. Voids, refunds and price overrides can require a manager PIN.

  • A record of what happened

    Voids, refunds, price changes and cash drawer openings are logged with who did them and when.

  • Sales saved on the register

    Every sale is recorded on the device first, so an internet outage does not stop the line.

  • Certified payments

    BuiltPOS™ is certified with Fiserv and TSYS on PAX terminals.

  • Status in the open

    Check the health of the BuiltPOS™ service any time at status.builtpos.com.

Report a security issue

If you think you have found a security problem in any of our products, email contact@builtsofthub.com with the details. Please give us a chance to fix it before sharing it publicly.

BuiltSIGN™ and SplitPerk™ describe how they handle data in their own privacy policies, linked from our Privacy Policy.