Security & Compliance Framework
Last Verified: October 16, 2026 | ISO 27001 Aligned & SOC-2 Ready
Enterprise Security Architecture
In high-volume restaurant operations, downtime costs revenue, while data breaches destroy customer trust. MR.Genious was architected from inception around strict multi-tenancy, granular least-privilege access, and offline data integrity.
Postgres Row-Level Security (RLS)
Every tenant partition is enforced at the database kernel layer. Even in the event of complex joins or subqueries, cross-tenant data leaks are mathematically impossible.
End-to-End Encryption in Transit & Rest
All API transactions use TLS 1.3 with automated HSTS header enforcement. Storage volumes, automated backups, and disk volumes are encrypted with AES-256.
Granular RBAC & Role Segregation
Strict separation between Cashiers, Kitchen Station Expeditors, Delivery Dispatchers, Store Managers, and Tenant Owners. Sensitive actions require supervisor PIN approval.
PCI-DSS Level 1 Gateway Integrations
MR.Genious operates a zero-custody card model. Card information is never exposed to our web servers, operating entirely on tokenized iframes and encrypted SDKs.
High Availability & Multi-Region Failover
Real-time database replication, automated hourly snapshots, and sub-second WebSocket clustering ensure your billing counter never stalls during peak lunch or dinner rushes.
Immutable Audit Trails
Every cash drawer open event, receipt void, manual bill discount, recipe adjustment, and role grant is written to an immutable append-only audit log.
Responsible Vulnerability Disclosure
We welcome collaboration with white-hat security researchers. If you discover a potential vulnerability within MR.Genious systems or endpoints, please disclose it to us responsibly without public dissemination:
PGP Key & Reporting Address: security@mrgenious.com
We commit to acknowledging reports within 24 hours and providing periodic remediation timelines.