Catalog module SEC

Security, Audit & Privacy

Part of K. Platform & Data. 41 items.

Tiers: Lite and Pro 36, Pro 5. Priority: Core 26, Standard 11, Optional 4.

Status

Planned Every item in this module is planned. Nothing here is built.

All 41 items

Audit log

SEC-0001 Planned Lite and Pro Core

Append-only log of sensitive actions with user, device, time

Audit log tamper evidence

SEC-0002 Planned Lite and Pro Standard

Hash chain

Depends on: SEC-0001

Audit log viewer & filters

SEC-0003 Planned Lite and Pro Core

Depends on: SEC-0001

Audit log export

SEC-0004 Planned Lite and Pro Standard

CSV/PDF

Depends on: SEC-0001

Audit on price/cost changes

SEC-0005 Planned Lite and Pro Core

Audit-log entry (user, device, time, before/after values) written for price/cost changes

Depends on: SEC-0001

Audit on voids/refunds/discounts

SEC-0006 Planned Lite and Pro Core

Audit-log entry (user, device, time, before/after values) written for voids/refunds/discounts

Depends on: SEC-0001

Audit on cash drawer opens

SEC-0007 Planned Lite and Pro Core

Audit-log entry (user, device, time, before/after values) written for cash drawer opens

Depends on: SEC-0001

Audit on permission changes

SEC-0008 Planned Lite and Pro Core

Audit-log entry (user, device, time, before/after values) written for permission changes

Depends on: SEC-0001

Audit on settings changes

SEC-0009 Planned Lite and Pro Core

Audit-log entry (user, device, time, before/after values) written for settings changes

Depends on: SEC-0001

Audit on data export

SEC-0010 Planned Lite and Pro Core

Audit-log entry (user, device, time, before/after values) written for data export

Depends on: SEC-0001

PIN policy

SEC-0011 Planned Lite and Pro Core

Length, lockout, rotation

Depends on: SEC-0001

PIN lockout after failures

SEC-0012 Planned Lite and Pro Core

Backoff and manager unlock

Depends on: SEC-0001

Password for owner/back-office

SEC-0013 Planned Lite and Pro Core

Strong passphrase

Depends on: SEC-0001

Biometric unlock on mobile

SEC-0014 Planned Lite and Pro Standard

Fingerprint/Face for app unlock

Depends on: SEC-0001

Database encryption at rest

SEC-0015 Planned Lite and Pro Core

SQLCipher or OS-level encryption

Depends on: SEC-0001, SEC-0016

Secrets in OS keystore

SEC-0016 Planned Lite and Pro Core

Windows DPAPI/Credential Locker, Android Keystore, iOS Keychain

Depends on: SEC-0001

Certificate (digital cert) secure storage

SEC-0017 Planned Lite and Pro Core

SUNAT certificate in keystore

Depends on: SEC-0001

Encrypted attachments

SEC-0018 Planned Lite and Pro Standard

Images and docs

Depends on: SEC-0001

Screen lock & privacy mode

SEC-0019 Planned Lite and Pro Standard

Hide sensitive numbers

Depends on: SEC-0001

Hide cost/margin by role

SEC-0020 Planned Lite and Pro Core

Role-based visibility

Depends on: SEC-0001

Session timeout

SEC-0021 Planned Lite and Pro Core

Auto logout

Depends on: SEC-0001

Remote wipe (local): wipe on N failed owner unlock

SEC-0022 Planned Pro Optional

Optional

Depends on: SEC-0001

Tamper detection (file hash)

SEC-0023 Planned Pro Optional

Detect altered app files

Depends on: SEC-0001

Anti-fraud rules

SEC-0024 Planned Pro Standard

Alerts on patterns

Depends on: SEC-0001

Two-person approval

SEC-0025 Planned Pro Optional

For large refunds

Depends on: SEC-0001

Secure deletion of customer data

SEC-0026 Planned Lite and Pro Standard

Overwrite

Depends on: SEC-0001

No telemetry guarantee

SEC-0027 Planned Lite and Pro Core

No analytics SDKs; build-time lint to block network libs

Depends on: SEC-0001

No outbound network by default

SEC-0028 Planned Lite and Pro Core

Only user-initiated: SUNAT send, updates, Tap to Pay provider

Depends on: SEC-0001

Network allowlist & transparency screen

SEC-0029 Planned Lite and Pro Standard

Show every host app may contact

Depends on: SEC-0001

Offline license verification

SEC-0030 Planned Lite and Pro Core

Signature verification without phone-home

Depends on: SEC-0001

Signed updates

SEC-0031 Planned Lite and Pro Core

Verify update signatures

Depends on: SEC-0001

Reproducible builds

SEC-0032 Planned Pro Optional

Verifiable builds

Depends on: SEC-0001

Data-at-rest key recovery

SEC-0033 Planned Lite and Pro Core

Printed recovery key

Depends on: SEC-0001

Privacy notice templates (Ley 29733)

SEC-0034 Planned Lite and Pro Core

Consent text

Depends on: SEC-0001

Personal data inventory

SEC-0035 Planned Lite and Pro Standard

Document fields collected

Depends on: SEC-0001

Data retention settings

SEC-0036 Planned Lite and Pro Standard

Auto-archive old customers

Depends on: SEC-0001

Role-limited export

SEC-0037 Planned Lite and Pro Core

Only owner can export

Depends on: SEC-0001

Payment data policy

SEC-0038 Planned Lite and Pro Core

Never store PAN/CVV/PIN

Depends on: SEC-0001

PCI scope minimization

SEC-0039 Planned Lite and Pro Core

Processor SDK handles all card data

Depends on: SEC-0001

Dependency vulnerability scanning

SEC-0040 Planned Lite and Pro Standard

SBOM and cargo-audit in CI

Depends on: SEC-0001

Memory-safe core

SEC-0041 Planned Lite and Pro Core

Memory-safe language for core

Depends on: SEC-0001

Category: K. Platform & Data. See also the industries that rely on this module.