Your store's data stays yours
A till runs your whole business — the money, the stock, your customers. Estura is built so that data lives on your own machine, card numbers never pass through us, and the register keeps working even when the internet doesn't. Here's exactly how, in plain language.
How Estura protects your store's data
No mandatory cloud account, no data leaving your counter unless you choose it. The defaults are the safe ones.
Your data lives on your till
Sales, inventory, employees and customers are stored in a database on your own Windows machine — not in someone else's cloud. It's your data, on your counter.
Card numbers never touch Estura
Card payments run on your own processor's terminal. Estura records that a sale was paid by card — it never sees, stores, or transmits the card number.
Works offline, fails safe
The till keeps ringing sales through an internet outage. The licence is checked offline and lapses only through a forgiving grace period — a dropped connection never stops you selling.
Secrets protected at rest
Your card-processor token is sealed with Windows' own OS-level encryption, not left readable on disk. Manager PINs are never stored in plain form — each is kept only as a memory-hard scrypt hash.
Automatic off-site backups
Turn on automatic backups and a copy is mirrored to a location you choose — a synced drive, USB stick, or network share — so a hardware failure never wipes your records. Keep the off-site copy somewhere only you can reach.
Guarded against guessing
Manager-PIN entry is rate-limited against repeated guesses, and a database that ever looks corrupt fails closed and restores from a known-good backup rather than carrying on with bad data.
How billing and licensing are secured
The parts that do touch the internet are the licence check and your monthly payment — both handled the careful way.
Signed, per-till licences
Your licence is cryptographically signed and locked to one till. A copied licence won't run on another machine, and the till can verify it offline without phoning home for every sale.
Payments handled by Stripe
Your subscription is billed through Stripe, a PCI-certified payment provider. Your card details go straight to Stripe over an encrypted connection — Estura never sees or stores them.
Encrypted, hosted on Cloudflare
The licensing service runs on Cloudflare's network with HTTPS end-to-end. It holds only what's needed to run your subscription — never your sales, stock, or customer data.
A locked-down vendor console
The behind-the-scenes admin tools we use to manage subscriptions sit behind a password and, optionally, single sign-on with two-factor, with changes to a store's subscription kept in an audit log.
You stay in control
No lock-in, no surprises. The relationship is simple on purpose.
Export whenever you want
Your product list and reports export to a file any time — the data is yours to take with you, in a format you can open.
Cancel anytime
No contracts and no cancellation fees. If you stop your subscription, your data stays right where it is — on your till.
We don't sell your data
We don't sell or share your store's data or your customers' information. Full detail is in our privacy policy.
A question about security?
Doing your due diligence before you trust a till with your store? Good — ask us anything. A real person on the team will walk you through how any part of this works.
Replies within one business day Terms of Service