Tabs & orders
- Named tabs tied to table, member, and seat, with tab notes and seat-level items.
- Seven-state order machine with per-line fire states, fire and send rounds, hold, and reopen on closed checks.
- Quick Sale fast-bar mode with promote-in-place to a full tab.
- Bottle service and spirit-upgrade upcharges, modifiers, and quantity adjust.
- Real-time multi-terminal sync — every station sees the same tab as it changes.
- Offline mutation queue with ordered replay — orders taken during a WAN drop reconcile in sequence when the link returns.
- Prior-day orphan-tab resolution for tabs left open across the business date.
Money controls
- Void line or tab, comp with server-side bounded credit authorization, and discounts (line and order) capped per staff group.
- Price override and restore / undo on void, comp, and discount — a gated correction path, not a silent edit.
- Manager-override PIN re-check on consequence-bearing actions, with a required reason string on every money operation.
Payments
- Cash and integrated card — chip, swipe, and tap on a pinpad, plus manual entry. Card data is handled in a PCI SAQ-A shape; the card number never touches the cipher screen.
- Refund, void, tip-adjust, and batch settle, with idempotency and advisory-lock serialization so a double-tap can't double-charge.
- Deposits as split tender with surplus routing, change-tip on closed checks, and tender-aware tips-payable math.
- Automatic service charge — server-authoritative, set per staff group — and table minimum-spend enforcement.
Card authorization runs through an integrated partner merchant processor; cipher never holds merchant funds. 0%-processing options are available — ask when you apply. Full detail: card processing.
Cash management
- Drawer kick, and paid-outs across 20+ categories.
- Cash drops separated from expenses, and a calculated deposit with an audited override.
- Over / short reconciliation at the drawer.
Printing & tickets
- A printer registry over TCP and USB, with remote print agents on each terminal.
- Server-owned prep-ticket dispatch — tickets fire from the server the moment a round is sent, not from the ordering terminal.
- Guest receipts and reprints, employee checkout and clock-out receipts, and a 15-section thermal report engine.
Reporting & the business day
- Sales, product-mix, employee, hourly, station, and live views, plus a full daily sales report.
- A custom report builder with saved presets, printed to thermal.
- Close Day with two hard gates: open tabs must be resolved, and an unsettled card batch blocks the close.
- All financial data separates by business date on the venue's operating hours — sales, tips, and payouts land on the right day even when Close Day runs late.
Roles, permissions & audit
- A database-driven per-group permission matrix with stacked authorization-level tiers and manager override.
- Training mode per group — test tabs are excluded from money reports.
- An append-only audit log on every money-touching action, with crash-reconcilable card pre-call rows, plus browse, filter, and stats.
- Remote access is default-deny unless the owner has verified the device.
Scanning & guest recognition
- USB scanner input with a QR prefix router — member, booking, ticket, reservation, VIP, comp, and staff codes each route to the right action.
- Rotating-HMAC QR validation, booking scan → check-in → seat, VIP comp-tab start and release, and member attach-to-tab with a phone-search fallback.
- Member tier surfaces on the tab as it's opened.
- Scan-to-ring: scan a bottle or package barcode and it rings straight onto the open tab — the same UPC scanners drive inventory and receiving.
The terminals boot into the point of sale and nothing else — a hardened Linux kiosk build with a crash-relaunch supervisor and a fail-closed off-network lock. See Architecture for the hardware and the outage boundary.