Company
Security
A high-level overview of how Cevor protects information.
Last updated · 12 September 2026 · Version 1.0
Security is a continuous effort, not a one-time claim. This page describes, at a high level, the approach Cevor takes.
1. Access control
Access to systems and data is limited to what is needed for a given role, and to authorized team members for restaurant accounts.
2. Encryption in transit
Data sent between your device and Cevor is protected using industry-standard encryption in transit.
3. Least privilege
Internal access follows the principle of least privilege: people and systems get only the access required to do their job.
4. Infrastructure providers
Cevor relies on reputable infrastructure and hosting providers and expects them to maintain appropriate security practices for the services they provide.
5. Incident handling
If a security incident affecting users or restaurants is identified, Cevor will investigate and take reasonable steps to address it and, where required, inform those affected.
6. Responsible disclosure
If you believe you have found a security vulnerability, please report it to hello@cevor.app rather than disclosing it publicly, so it can be investigated and addressed.
Contact
To report a security concern, write to hello@cevor.app
See also