Legal

Security

How POSRex protects your business data — and how to report an issue.

June 2026

At rest

Local data and cached license tokens are encrypted with AES-256-GCM. Cloud backups are encrypted on your device before upload.

In transit

All communication with our servers uses HTTPS/TLS. License and cloud requests are signed so they can't be tampered with.

Licensing

Licenses are bound to a hardware ID and verified against our license server, with offline grace so a dropped connection never locks you out of a sale.

Reporting a vulnerability

Found a security issue? Email us with the details. We investigate every report and patch confirmed issues quickly, then credit you if you'd like.