Staff see exactly what they should

Granular permissions per role, so a cashier can take orders without seeing your margins and a supervisor can approve refunds without touching payroll.

Start free trial See pricing

Permission by permission

Access is controlled per capability rather than per broad role, so you're never choosing between giving somebody everything and giving them nothing. A cashier takes orders and closes their drawer. A supervisor approves discounts and refunds. Only the people you nominate can see costs, margins, payroll or the ledger.

A staff list showing each team member's role and permission chips, from the full-access owner down to single-permission staff.

Per-capability controlNot just broad all-or-nothing roles
Cost visibility controlYou choose who can see margins and payroll
Approval gatingRefunds and discounts require the right role
Role templatesDefine a role once and apply it to every new hire
Session controlAccess ends the day employment does

Multi-branch by design

Every business's data is fully isolated, so a manager at one branch cannot read another branch's numbers even by accident. For chains, institution-level admins manage a shared catalog across outlets and switch between branches, while branch staff stay scoped to the outlet they actually work in.