Security

How we look after your shop's data

Your jewellery operations data is mission-critical. DiamondOar is built from the ground up to protect it with multiple layers of enterprise security.

Encrypted in transit and at rest

Traffic between your devices and our servers is encrypted with HTTPS. Our database provider stores your data encrypted on disk.

Roles and permissions

Cashiers, managers, finance staff and owners each see what their role allows. One shop's records are separated from every other shop's.

Audit trail

Bills, stock adjustments, pawn issues, voids and logins are recorded with the person and the time, so you can see who did what.

Backups

Our database provider takes regular backups of your data, so it can be restored if something fails.

Documents kept private

ID scans and supplier bills are stored in private storage and opened through a link that expires, rather than a public address.

Hosted infrastructure

DiamondOar runs on Vercel and Supabase, whose platforms handle server redundancy and failover.

Responsible Disclosure

If you believe you have found a security vulnerability in DiamondOar, we encourage responsible disclosure. Please contact our security team directly and we will investigate promptly.

Report a Vulnerability