Security & Compliance

Built to the security standards enterprise retail demands.

When you run your retail operation on Eleos, you are entrusting us with your transaction data, your customer records, and your business intelligence. We treat that responsibility seriously — with PCI-DSS compliant payment handling, PDPA-aligned data management, role-based access controls, and the infrastructure uptime your stores depend on.

Eleos security and compliance

Enterprise-grade security. By default.

PDPA Aligned

Personal data managed in accordance with Singapore's Personal Data Protection Act.

Encryption at Rest & in Transit

All data encrypted using current TLS standards. No unencrypted data storage or transmission.

Role-Based Access Controls

Granular permissions enforced at the data level. Every user sees only what their role permits.

Full Audit Trail

Every action logged with user identity, timestamp, and action detail. Retained for compliance review.

Enterprise Uptime

Redundant cloud infrastructure with automated failover. Your stores trade — your platform stays up.

Security Framework

Four layers of protection around your operation.

Data Privacy

Singapore PDPA Alignment

Eleos manages personal data in accordance with Singapore's PDPA, including purpose limitation, access controls, data retention policies, and the ability to respond to data subject requests.

GDPR Awareness

For retailers operating in or serving customers from European markets, Eleos's data management practices are designed with GDPR principles in mind.

Data Residency

Eleos provides guidance on data residency options for enterprise customers with regulatory requirements around where their data is stored.

Access Controls

Role-Based Permissions

Every user is assigned a role that defines what they can see and do — from store cashier to head office administrator. Access is enforced at the data level.

Multi-Factor Authentication

Administrative access to the Eleos platform requires multi-factor authentication. This protects your business configuration and customer data.

Granular Permission Configuration

For complex organisational structures, permissions can be configured at a granular level by role, location, or entity.

Audit & Compliance

Full Audit Trail

Every action within Eleos is logged — voids, overrides, access to customer records, configuration changes. Available for compliance review or investigation.

Fraud Detection Controls

Controls that flag unusual transaction patterns — high-value voids, repeated discount overrides, access anomalies — for manager review.

Infrastructure

Cloud Infrastructure

Eleos runs on enterprise cloud infrastructure with geographic redundancy and automated failover. POS terminals can continue processing sales during connectivity interruptions, syncing when connectivity is restored.

SLA Commitments

Enterprise customers receive SLA terms defining uptime commitments, incident response times, and escalation procedures.

Disaster Recovery

Data is backed up continuously with defined RPO and RTO. In the event of a major infrastructure incident, your business data is protected.

Frequently asked questions.

Questions about security and compliance?

Our team is available to discuss your specific security requirements, compliance needs, and data residency preferences.