Security & data handling
What your IT team needs to sign off.
FreshMise is a browser-based product hosted on managed cloud infrastructure. No hardware on your network, no agent to install, and a clear line on where hotel data lives and who can see it.
At a glance
Cloud-hosted, encrypted, access-controlled.
- In transit
- HTTPS · TLS 1.2+
- At rest
- Encrypted
- Access
- 4 scoped roles
- Audit trail
- Every action logged
- On your network
- Nothing installed
Hosted on Microsoft Azure · card data handled by a PCI-compliant processor.
Hosting & infrastructure
- Hosted on Microsoft Azure in managed, access-controlled data centres.
- Application and database are logically isolated per environment.
- Runs in the browser — no agent, no kiosk software, nothing installed on your network.
Encryption
- All traffic is served over HTTPS/TLS. Plain HTTP is redirected and never accepted.
- Data is encrypted at rest in the managed database and in backups.
- Payment details are handled by a PCI-compliant processor — FreshMise never stores card numbers.
Access control & roles
- Role-based access: Admin, Kitchen Manager, Kitchen Staff and Auditor — each sees only what its role needs.
- Token-based authentication (JWT with short-lived access and refresh tokens).
- Access is scoped by property and kitchen, so an outlet only touches its own inventory.
Audit & accountability
- Every print, scan, open, move and disposal is recorded with the user and a timestamp.
- The audit trail is read-only history — useful for HACCP records and internal review.
- The Auditor role gives inspectors or QA a view without the ability to change data.
Your data, your call
- Your inventory data is yours. Export it, and request deletion of your account data at any time.
- We collect what runs the product — kitchen and inventory records and basic account details. No more.
- Analytics are privacy-first (Plausible), with no third-party advertising trackers.
Availability & continuity
- Managed, automated database backups.
- Infrastructure scales with the managed cloud platform underneath it.
- A single tenant issue can’t reach another property’s data.
Running a formal review? We're happy to walk your IT or security team through the architecture and answer a security questionnaire. Email hello@freshmise.com and we'll set it up.
Bring your IT team to the demo.
We'll cover hosting, access control and data handling live, then leave you to trial it free for 30 days.