Security & Anti-Abuse
Protections that keep sessions, orders, and customer data safe.
6 of 7 protections active
This is a demo view — toggles are mock and do not affect a live system.
Protections
Automated safeguards for orders and sessions
Table-session token security
Each table session is issued a signed, single-use token that expires when the session ends.
Duplicate order prevention
Identical orders submitted within a short window from the same session are automatically flagged.
Fake order detection
Orders from sessions with no verified table presence are held for manual review.
Rate limiting
Order and payment endpoints are throttled per session to prevent abuse and scripted attacks.
Suspicious activity detection
Unusual ordering patterns (rapid repeat orders, mismatched totals) trigger an automatic alert.
Authorization checks
Every admin action is scoped to the authenticated staff role for this location.
Data protection
Customer and payment data is encrypted at rest and in transit, and never shared with third parties.
Data Protection
How customer and payment data is handled
All customer and payment data is encrypted at rest and in transit, scoped to this location, and never shared with third parties. Session tokens are single-use and expire automatically when a table session ends.