Security

Built so you do not have to wonder

This page says in plain words how Sellular protects your business and your customers, and what we do not claim. We are an early product, so we say what is in place, and we keep this page honest as it changes.

Card numbers never touch us

A card is read on the payment terminal, and the terminal talks to the payment provider. Sellular never sees, stores or sends a card number, an expiry date or a security code. We keep only a reference from the provider, the last four digits, the card brand and the result, so there is no card data in our systems to lose. Our apps have no field to type a card number into.

Every sale is signed

Each device signs what it records. Any entry can be traced to the device that made it, and cannot be quietly changed afterwards, even if the sale was made while the internet was down.

Every change leaves a trail

Who voided a sale, changed a price, edited the menu or exported a report, and when, goes into an audit trail that can only be added to, never edited or deleted. We keep it for seven years.

Your business is separate from every other

Each business is isolated from every other in the database itself, not only in the app. A bug in one screen cannot show one business another's sales.

Signing in and access

People get only the access their role gives them, at the branches they work in.

• Staff PINs are at least six digits and are stored only as a one-way hash. Repeated wrong PINs lock the account for a while, and the lock grows if guessing continues.
• The owner's account, and anyone who can change billing, members or the audit export, signs in with a second step, using any of the authenticators they have added.
• Sign-in attempts are rate limited, and repeated failures lock the account for a time that doubles, up to a cap.
• An invitation link expires after seven days.

Devices and the store network

A tablet in your store holds your sales, so we protect it as if it could be lost:

• The sales database on the device is encrypted, and its key lives in the device's secure storage.
• Devices in the store talk to each other over an encrypted connection, and each checks that it is talking to your own device, not an impostor.
• Nothing is copied out of the device by the phone's cloud backup.
• A tablet carried out of the store stops taking orders. You can turn that off for a food truck or an event.
• If a device is lost or stolen, you can switch it off from Admin, and the cloud stops accepting it at once. A manager can also turn it off at another till when there is no internet.

This website and the application form

The form asks for no passwords, PINs, IDs or card details. Your browser talks only to this website, and never to our servers directly. This website's server passes your answers on, checks them again, and limits how fast any one visitor can send them. All traffic to the website and our servers is encrypted in transit.

Hosting and backups

Our servers run with a cloud provider, and our database is a managed service with backups and point-in-time recovery, so a mistake or a failure can be undone without relying on us to run the database ourselves. Today, the early-access service runs on a small footprint, and a server failure can cause downtime.

What we do not claim yet

We do not currently hold a security certification such as SOC 2 or ISO 27001, and we do not say we do. Card payment compliance is carried by the payment terminal and provider, because our systems never hold card data. If you need more detail for your own review, ask us.

Reporting a vulnerability

If you think you have found a weakness, please write to hello@mail.getsellular.com. It helps if you tell us what you found, where, and the steps to see it. Please:

• Give us a reasonable time to fix it before you tell anyone else.
• Do not access, change or keep anyone else's data. Stop as soon as you have shown the problem.
• Do not disrupt the service or test with denial-of-service or social-engineering attacks.
• We will acknowledge your report, keep you updated, and not take action against you for research done in good faith within these rules.