Security and trust

Every restaurant's records live in one database, separated by row-level security. Each table carries a rule that only returns rows belonging to the restaurant you are signed in to. Another account cannot read or change your invoices, costs, recipes or stock, even by calling the database directly rather than going through the app.

The same rules stop a record pointing at another restaurant's data. A recipe can only use your own ingredients, and an invoice line can only update your own stock.

The invoice photos and PDFs you upload are kept in private storage, filed under your restaurant. They are never published at a public address. When you open one, the app creates a link to it that stops working after one hour.

Uploads are limited to images and PDFs of up to 10 MB each.

You sign in with an email address and password, or with your Google account. Our sign-up and password reset forms ask for at least 10 characters, including a letter and a number.

Team invites expire after 7 days, and an invite can only be accepted by the email address it was sent to.

Only an admin can invite or remove team members, change their roles, edit the restaurant's details, start a paid plan or connect Xero. Deleting records outright needs an admin, head chef or manager. These checks run on our server or in the database, not only in the screens you see.

Stockpot uses Anthropic's Claude models to read documents for you. When you use these features, we send Anthropic:

• the invoice photos and PDFs you upload for reading
• menus and supplier catalogues you import
• your ingredient names, so an invoice line can be matched to an item you already stock, and a dish's name and description when you ask for ingredient suggestions
• the messages you type to the in-app help assistant

Anthropic's commercial terms state that it may not train models on customer content from its services.

What the AI reads is only ever a draft. Stock levels, ingredient costs, recipe costs and price alerts change only when someone on your team reviews the invoice and approves it. When the AI suggests which of your ingredients a line matches, the suggestion is checked against your own ingredient list first, so it cannot invent an item you do not stock.

When you pay for a plan, checkout runs in Paddle's own payment window. Paddle is our merchant of record: it takes your card details, processes the payment and handles sales tax. Card details never pass through Stockpot's servers, and we never see or store them.

The messages Paddle sends us about your subscription are signed, and we reject any that fail the signature check.

Every connection to Stockpot is encrypted with HTTPS, and browsers are told never to connect without it. Stored data is encrypted at rest with AES-256 by our database provider, Supabase.

The website and the app run at separate addresses, stockpothq.com and app.stockpothq.com, so nothing on the website can run where you are signed in. Every page sends a Content-Security-Policy that limits where scripts, styles and fonts may load from, and no other site can show our pages inside a frame.

Our API only answers requests coming from the Stockpot app, checks your session on every call, limits how often each account can call it, and caps the size of each request.

The app runs copies of its JavaScript libraries that we host ourselves, pinned to known versions, rather than loading them live from other servers. The one exception is Paddle's checkout script, which Paddle requires us to load from its own servers. The app carries no advertising or analytics trackers.

The secret keys for our database, AI provider, payments and Xero are kept only on our server. The keys your browser holds are the public ones designed to be there.

If you connect Xero, the access token Xero issues is encrypted with AES-256-GCM before we store it, and your browser can never read it back; the app only sees whether you are connected. Bills are sent to Xero only when an admin chooses to send them.

You can export your records to CSV at any time: inventory, invoices, purchase orders, sales, price history, waste, food cost and alerts.

To have your account and your restaurant's data deleted, email privacy@stockpothq.com from the address on the account. Our privacy policy explains what we keep and why.

If you think you have found a security problem in Stockpot, please email security@stockpothq.com. Tell us what you found, the steps to reproduce it, and what data it could expose.

While testing, please do not access other customers' data or disrupt the service, and give us a chance to fix the problem before you share it publicly. Our contact details for researchers are also published at /.well-known/security.txt.