SipsPOS
Trust & security

Your winery's data, handled with care.

SipsPOS runs your tasting room, club, and customer list — so we keep security tight and transparent. Here's how your data is protected and who touches it.

Your data is yours

  • Export your products, customers, employees and bookings to CSV anytime from the Import Center — no lock-in.
  • Each winery's data is isolated and scoped to its own account; one winery can never see another's.
  • Month-to-month. Cancel and take your data with you whenever you like.

Payments

  • Card payments are processed by Square and Stripe — PCI-DSS certified providers.
  • We never store full card numbers. Cards on file (for wine club) are tokenized and held by the processor, not by us.
  • Each winery connects its own processor account, so funds settle directly to you.

Access & accounts

  • Staff sign in with per-person PINs and role-based permissions (cashier / manager / admin).
  • Sensitive actions (like comps) require a manager PIN override and are recorded.
  • Optionally restrict back-office access to trusted networks with an IP allowlist.
  • Passwords and PINs are stored only as salted hashes, never in plain text.

Reliability & backups

  • Hosted on managed cloud infrastructure with encryption in transit (HTTPS) and at rest.
  • The database is backed up automatically by our managed provider.
  • The register keeps working offline and re-syncs when the connection returns — a busy Saturday never stalls.
  • Live system status is always at /status.

Privacy & compliance

  • We handle personal information in line with Canadian privacy law (PIPEDA).
  • Marketing emails include an unsubscribe link and honor opt-outs (CASL).
  • Built-in tooling helps you meet BC liquor and DTC shipping requirements.

Sub-processors

  • Cloud hosting & managed database (application + data).
  • Square & Stripe (payment processing).
  • Email delivery provider (transactional & marketing email).

Report a concern

Found a vulnerability or have a security question? Email security@sipspos.com and we'll respond promptly. Please don't publicly disclose an issue before we've had a chance to address it.