How we keepdata safe.
Restaurants trust us with their numbers. This page says plainly how we protect them. To report a security problem, email support@yieldtrac.com with “Security” in the subject line.
Each business’s data is walled off
Every business sees only its own locations. The database itself keeps each business’s records separate, not just the screens, and invoice photos are stored in each restaurant’s own folder. Within a business, roles decide what each person can do. Only YieldTrac’s own team can open a business’s account, and only to support it.
Encryption
Everything travels over HTTPS, and browsers are told to always use it. Our database and file storage providers encrypt stored data. Invoice photos are kept private and shown through links that expire.
Sign-in
Passwords are stored only in a protected, scrambled form, and the app refuses weak or common passwords. Password and invite links work once and expire. Managers can remove a person’s login at any time, and anyone can sign out their other devices. Two-step sign-in and passkeys are built and will be switched on soon.
Keys and AI
Keys for our AI and email providers stay on our servers and never reach your browser. Voice counting uses passes that expire within a minute. AI drafts invoice readings, but nothing changes your stock until a person approves it.
Backups and history
Our database provider takes daily backups. The database itself records changes to stock, prices and pars, and who made each one.
Checks and monitoring
Thousands of automated tests run before every release, and a release that fails them doesn’t go out. Errors are recorded so we can find and fix problems. Our website and app send security headers, for example so they can’t be hidden inside another site’s page.
Certifications
YieldTrac doesn’t have a SOC 2 report yet. Our hosting and database providers do have SOC 2 reports for their own systems. The service providers that handle your data are described on our Subprocessors page.
If something goes wrong
If someone reaches your data who shouldn’t have, we will tell your business without undue delay, and within 72 hours of confirming it, with what happened and what we’re doing about it.
Reporting a problem
If you find a weakness, email support@yieldtrac.com with “Security” in the subject. Please don’t access other people’s data, slow the Service down or share the problem publicly before we’ve fixed it. We’ll reply and keep you posted.