Security & trust

Your store's data stays yours

A till runs your whole business — the money, the stock, your customers. Estura is built so that data lives on your own machine, card numbers never pass through us, and the register keeps working even when the internet doesn't. Here's exactly how, in plain language.

On the till

How Estura protects your store's data

No mandatory cloud account, no data leaving your counter unless you choose it. The defaults are the safe ones.

Your data lives on your till

Sales, inventory, employees and customers are stored in a database on your own Windows machine — not in someone else's cloud. It's your data, on your counter.

Card numbers never touch Estura

Card payments run on your own processor's terminal. Estura records that a sale was paid by card — it never sees, stores, or transmits the card number.

Works offline, fails safe

The till keeps ringing sales through an internet outage. The licence is checked offline and lapses only through a forgiving grace period — a dropped connection never stops you selling.

Secrets protected at rest

Your card-processor token is sealed with Windows' own OS-level encryption, not left readable on disk. Manager PINs are never stored in plain form — each is kept only as a memory-hard scrypt hash.

Automatic off-site backups

Turn on automatic backups and a copy is mirrored to a location you choose — a synced drive, USB stick, or network share — so a hardware failure never wipes your records. Keep the off-site copy somewhere only you can reach.

Guarded against guessing

Manager-PIN entry is rate-limited against repeated guesses, and a database that ever looks corrupt fails closed and restores from a known-good backup rather than carrying on with bad data.

Subscription & payments

How billing and licensing are secured

The parts that do touch the internet are the licence check and your monthly payment — both handled the careful way.

Signed, per-till licences

Your licence is cryptographically signed and locked to one till. A copied licence won't run on another machine, and the till can verify it offline without phoning home for every sale.

Payments handled by Stripe

Your subscription is billed through Stripe, a PCI-certified payment provider. Your card details go straight to Stripe over an encrypted connection — Estura never sees or stores them.

Encrypted, hosted on Cloudflare

The licensing service runs on Cloudflare's network with HTTPS end-to-end. It holds only what's needed to run your subscription — never your sales, stock, or customer data.

A locked-down vendor console

The behind-the-scenes admin tools we use to manage subscriptions sit behind a password and, optionally, single sign-on with two-factor, with changes to a store's subscription kept in an audit log.

Your data, your call

You stay in control

No lock-in, no surprises. The relationship is simple on purpose.

Export whenever you want

Your product list and reports export to a file any time — the data is yours to take with you, in a format you can open.

Cancel anytime

No contracts and no cancellation fees. If you stop your subscription, your data stays right where it is — on your till.

We don't sell your data

We don't sell or share your store's data or your customers' information. Full detail is in our privacy policy.

A question about security?

Doing your due diligence before you trust a till with your store? Good — ask us anything. A real person on the team will walk you through how any part of this works.

Replies within one business day Terms of Service