Hosting in Germany
VidiPOS runs on servers of Hetzner Online GmbH in the Falkenstein data centre in Germany. That is where the journal, closings, receipts and the fiscal archive are stored; the archive’s files sit outside public web access. The signatures come from the certified cloud TSE from fiskaly.
Every business sees only its own data. This also applies to audits: an auditor package and an auditor access contain only your business’s data.
Hourly backups
Database and files are backed up on the server every hour. In addition, an encrypted backup goes to a separate storage system in Germany every hour. So your data doesn’t sit in just one place.
An additional rule applies to the fiscal archive: a missing or altered file is restored from the backup only if the backed-up file has exactly the same checksum. An altered file stays alongside as evidence, and every restoration is logged.
Access with roles and permissions
You access the till data through the back office. What someone may see or change there and at the till is determined by their role: every function has its own permission with the levels none, view and edit. Permissions are checked on the server, not just in the interface.
In the role templates, the Kassenmeldung and the auditor package are reserved for the owner; only the owner sets up an auditor access. If an account is blocked, the linked operator loses their rights at the till.
PINs, pairing codes and devices
Every operator logs in with their own PIN of four to six digits. VidiPOS does not store PINs and pairing codes in plain text and never shows a PIN again. After five wrong attempts an operator is locked out for 15 minutes, and after 15 minutes of inactivity the login ends by itself.
You pair a new device with a code that is shown only once, is valid for ten minutes and works for exactly one device. If a tablet or phone is lost, you block it in the back office with one click; after that it can no longer log in. The TSE credentials are stored only encrypted on the server, never on the devices.
Encryption and unalterable archive
App, back office and server are connected through encrypted connections (TLS). VidiPOS stores the tax identification number for the Kassenmeldung encrypted and never shows it in full.
The fiscal archive is built so that a file can be neither changed nor deleted before the retention period ends. Every file carries a SHA-256 checksum that is verified before every download; VidiPOS does not deliver an altered file. On top of that comes the hash chain in the journal, which you can verify yourself at any time.
Our commitment
We keep VidiPOS continuously aligned with KassenSichV, GoBD and DSFinV-K and inform you about changes in the law.
Responsibility for proper till management stays with your business: you register your tills, count and close, and complete the procedure documentation. VidiPOS gives you the tools for it. How the requirements apply to your business in detail, you clarify with your tax adviser.