1. A practical approach
Event records can include contact details, venues, dietary requirements, prices and private notes. CaterScale is designed to keep those records within the appropriate workspace and role. This page describes product controls, not an independent audit, certification or guarantee.
2. Workspace and role boundaries
Workspace-scoped access checks and database policies separate business records. Owners manage the business and team. Office staff coordinate customer and event work. Kitchen views provide approved production details without customer contact details, private office notes or pricing.
Remove access when people leave and review role assignments regularly. Protect credentials and use the security controls offered by your authentication provider.
4. Card payments and AI review
Stripe hosts card entry. CaterScale verifies provider-confirmed payments before recording them; returning to a success page alone is not payment proof.
AI inquiry review suggests details for a person to check. It cannot choose prices, save an event or send a message by itself. Only submit information you are authorized to process, and review dietary requests with particular care.
5. Shared responsibilities
Limit unnecessary sensitive information, keep devices secure, use appropriate staff roles and review documents before sharing. Contact us for current hosting, retention, backup or incident-response details applicable to your service rather than relying on unverified certifications or promises.
6. Report a concern
Choose “Security concern” on the contact page to report suspected unauthorized access or a vulnerability. Describe the issue without passwords, secret links, card numbers or customer records. We can arrange a suitable way to exchange sensitive details if needed.