FoxLava POSFoxLava POS

Security by construction

FoxLava POS treats your sales data like money — because it is.

  1. Per-device identity

    Each device generates its own Ed25519 keypair at first run; the private key never leaves the device. A stolen license file is useless on other hardware.

  2. Signed everything

    Licenses and software updates are signed offline with a root key; every device verifies before trusting. A compromised server still cannot push rogue software.

  3. Tamper-evident audit

    Voids, refunds, price overrides, discounts and drawer opens form a hash chain. Editing history breaks the chain visibly.

  4. Encrypted backups

    Hourly local snapshots, nightly AES-256-GCM archives to the cloud with the key escrowed per store, and automatic restore testing.

  5. Least exposure

    Cashier APIs are served to the local device only; stores reach the cloud through outbound connections — no open ports, no port forwarding.

  6. Out of PCI scope

    Card payments run on certified bank terminals; FoxLava POS never stores or transmits card numbers.

Questions from your IT team?

We're happy to walk through the architecture in detail — contact us.