Security and trust

Security and trust

Freedom POS is a merchant operating platform, and its marketing website at freedompos.com sets HSTS, a strict Content Security Policy, and other browser-level protections, collects nothing from visitors, and keeps every answer in the on-site demo configurator in your browser only.

This page covers two different things on purpose: what this marketing website does with your information, and what any merchant should require from a point-of-sale or payments vendor. We keep those separate because we think the separation itself matters.

How we think about it

Separation of concerns, not a slogan

We treat the public marketing site and the operating platform as two different systems with two different jobs. This site's job is to explain the product and let you look around without an account. It is not where orders get taken, payments get processed, or account data lives. Keeping that boundary firm is itself a security decision, not just a note about how the code is organized.

Everything below describes what freedompos.com, the site you are reading right now, actually does. It is not a description of the security posture of the Freedom POS operating platform, sign-in, or payment processing, which are out of scope for this page.

This website, specifically

What freedompos.com does and does not do with your information

Encrypted in transit

This site is served over HTTPS, and HTTP Strict Transport Security instructs your browser to use the encrypted connection for this site from then on.

A strict Content Security Policy

A strict CSP limits what scripts, styles, and resources this site is allowed to load, narrowing the room for injected or unexpected content.

Locked-down browser behavior

X-Content-Type-Options is set to nosniff, X-Frame-Options is set to DENY, referrer information is sent under a strict-origin-when-cross-origin policy, and a permissions policy blocks this site from requesting camera, microphone, or location access.

The demo asks nothing of a server

The demo configurator keeps your answers in your browser only. Nothing you type is transmitted or stored anywhere until you deliberately choose to open a prefilled email draft yourself.

Card payments

How card payments are handled

This section is about the Freedom POS product itself, not just the marketing website above.

Card payments in Freedom POS run through Datacap, a PCI-certified payment gateway. Datacap is processor-agnostic, which means it connects to the processor a merchant has already chosen rather than locking a merchant into one.

Payments are designed to route through the Datacap gateway rather than through a generic, unnamed processor. The specifics of how card data flows for your configuration, including exactly where it does and does not touch Freedom POS systems, depend on setup; contact us for the details of your configuration.

For any point-of-sale or payments vendor

What you should require before you sign anything

This is buyer education, not a claim about Freedom POS specifically. Ask any point-of-sale or payments vendor, including us, to answer these plainly before you commit.

Where your data lives, and who owns it

Ask whether your transaction, customer, and inventory data is yours to export at any time, in a usable format, without penalty for leaving.

What is certified, and by whom

Ask for the vendor's current PCI DSS compliance level and how they can prove it, rather than taking a badge on a website at face value.

How payment data is actually handled

Ask whether card data ever touches the vendor's own systems, or whether it is tokenized and handled by a dedicated payment processor.

What happens if something goes wrong

Ask about breach notification commitments, incident response process, and who you would actually reach if something looked wrong in the middle of the night.

Who can see your data, and why

Ask how employee access to merchant data is controlled, logged, and reviewed inside the vendor's own company.

What happens if you switch vendors

Ask what happens to your data, your hardware, and your transaction history if you decide to leave.

Report something

Tell us about a security question or concern

If you have a security question about this website, or you think you have found a problem, contact hello@freedompos.com.

Please do not include sensitive account or payment details in that first message. We will follow up with a secure way to share anything further.

Have a question

Security questions go through the same door

Reach hello@freedompos.com with a security question about this website or about the Freedom POS platform, and we will route it to the right place.

See your business in action