Technical Documentation

Security and compliance

API controls and the limit of what we promise.

Controls

  • Encrypted transit and security headers on the API
  • Authenticated session; staff do not see fiscal setup or the plan charge
  • Secrets (Stripe, providers) from the environment, not the client
  • Printing on the floor network: Nodo does not forward the ticket to a third party to “analyze” it

What that does not mean

  • Nodo does not warrant that a third-party printer always prints.
  • Nodo is not the tax office or the floor’s bank.
  • The formal text is under Legal.