Security at STOKK
The measures that keep the numbers running your business safe.
Last updated: July 2026
Merchants trust STOKK with the numbers that run their livelihood. Security is a first-class part of how we build. This page summarises the measures that protect your account and data.
1.Encryption
Data is encrypted in transit with TLS. Sensitive credentials such as PINs and refresh tokens are hashed, never stored in plain text.
2.Authentication
Owners sign in with a one-time code sent to their phone. Staff use their own PINs with role-based permissions, so each person only sees what they should.
3.Offline-first by design
Your records live on your device first and sync securely to your account, so a lost connection never means a lost sale, or exposed data on a shared network.
4.Payments
Card payments are handled by PCI-DSS compliant partners. STOKK never sees or stores full card numbers.
5.Report a vulnerability
Found a security issue? We appreciate responsible disclosure. Email info@stokkapp.com and we will respond promptly.