Trust Center

    Built to keep your business data safe.

    MerxumOS runs the heart of your business — your sales, stock, staff and customers. We treat that data with the care it deserves: encrypted, isolated, backed up, and always yours.

    Encryption in transit & at rest Role-based access Automated backups Data you own
    How we protect you

    Security built into every layer

    Encryption everywhere

    Your data is encrypted in transit with TLS and at rest in our database — protected on the wire and on disk.

    Strong authentication

    Passwords are hashed with bcrypt and never stored in plain text. Turn on two-factor authentication for an extra layer.

    Role-based access

    Granular, industry-aware roles mean each team member only sees what their job needs — from cashier to owner.

    Your data, isolated

    Every business's data is logically separated. Your team is the only one who can see your sales, stock and customers.

    Automated backups

    We run regular automated backups so your records can be restored if the unexpected happens.

    You own your data

    Export your data whenever you want. It's your business — you're never locked in.

    Reliable infrastructure

    MerxumOS runs on enterprise-grade cloud infrastructure built for high availability, with a 99.9% uptime target.

    Audit & accountability

    Staff sign in with their own accounts, so every sale, refund and change is tied to a person and a time.

    In depth

    A closer look at how we keep you safe

    Infrastructure & encryption

    • Hosted on enterprise-grade cloud infrastructure.
    • TLS encryption for all data in transit.
    • Encryption at rest for your database.
    • Platform and network hardening managed by our infrastructure providers.

    Access & authentication

    • Passwords hashed with bcrypt — never stored or logged in plain text.
    • Optional two-factor authentication (OTP) for sensitive accounts.
    • Role-based permissions across every module.
    • Per-user logins with the ability to revoke access instantly.

    Data ownership & privacy

    • Your data belongs to you — we never sell it.
    • Per-business data isolation keeps your records separate.
    • Export your data at any time, in standard formats.
    • We process data only to provide the service — see our Privacy Policy.

    Availability & recovery

    • Uptime target of 99.9%.
    • Regular automated backups of your data.
    • Offline-first POS keeps you selling through connectivity drops, syncing when you reconnect.
    • Monitoring so we can detect and respond to issues quickly.
    Compliance & privacy

    Data protection you can trust

    Ghana Data Protection Act

    We handle personal data in line with Ghana's Data Protection Act, and apply the same principles wherever you operate.

    We never sell your data

    Your business and customer data is never sold or shared with third parties for marketing. It's used only to run and improve the service.

    A growing security program

    We continually strengthen our security practices and are working toward formal certifications as we scale. Talk to us about your specific requirements.

    For the full detail on how we collect, use and protect personal data, read our Privacy Policy and Terms of Use.

    FAQ

    Security questions, answered

    Where is my data stored?
    Can other businesses see my data?
    What happens to my data if I cancel?
    Do you sell my data?
    How do you keep staff access secure?
    Do you support two-factor authentication?
    Have a question?

    Security or compliance questions? We're happy to help.

    Whether you need details for a procurement review or just want peace of mind, reach out and we'll walk you through it.