PayMyDineRole access
Document which of the 6 workspaces can view, create, change, approve or export each type of restaurant and guest data.
4 security review areas
Review security for your actual setup.
Review access, data flows, providers and deployment controls for your environment.
PayMyDine4 security review areas
Data flow
Map the source, destination, purpose, retention and responsible party for table, order, guest, payment and reporting data.
Integration boundary
Record the API permissions, available fields, authentication method and failure handling for every external POS, payment or delivery system.
Deployment controls
Review hosting, backups, logging, monitoring, incident handling and provider responsibilities for the actual deployed environment.
Questions to document
Know who can access your data.
Review storage, system access and incident responsibilities before launch.
Role permissionsData inventoryIntegration credentialsRetention and backupsLogging and monitoringIncident responsibility
Built around your restaurant
Review your security setup.
Share your data flows and providers so responsibilities can be documented.