Trust, with clear boundaries
Understand how access works, what you control and what to check before moving your business.
PatoHQ supports account security settings including two-factor authentication and passkeys where supported. Staff roles determine available actions. Database permissions and tenant-scoped access controls protect business records; hiding a button is not the security boundary.
A paired register, a cashier PIN and a shift identify operational activity separately from a back-office account. Use dedicated devices and review staff and register access when people leave.
Pending sales are kept on the register until they sync successfully. Keep the device safe, review the sync state and do not clear browser storage while transactions are pending. Offline copies are not a substitute for confirmed central records or a tested backup process.
Recording a card or mobile-money tender is different from processing the payment. Subscription payment providers handle their checkout details. Confirm the payment and reconciliation workflow your business needs before switching.
Ask about your access model, exports, retention and operational requirements. We do not claim an independent security certification or a regulatory approval on this page.
Discuss your requirements