Security by design.
Yafe is built with security as a core feature — not an afterthought. Every layer, from authentication to data isolation, is designed to protect your restaurant's data.
- Auth
- JWT + 2FA
- Access
- RBAC
- Audit
- Full trail
- Isolation
- Per-org
- 01
Authentication
JWT-based authentication with secure token storage. Password-based sign-in with rate limiting. Support for invite-based onboarding with time-limited tokens.
- 02
Two-Factor Authentication
TOTP-based 2FA via authenticator apps (Google Authenticator, Authy). Turn on or off from your security settings. QR code generation for easy setup.
- 03
Role-Based Access Control
System roles: SYSADMIN, ADMIN, STAFF, WAITER, COOK, CUSTOMER. Custom roles with granular permission sets (staff.create, menu.view, orders.updateStatus, etc.). Every page and API endpoint is permission-gated.
- 04
User Impersonation
SYSADMIN users can temporarily log in as any user for support and troubleshooting. All impersonation sessions are logged in the audit trail.
- 05
Organisation Isolation
Multi-tenant architecture with complete data isolation per organisation. Users, menus, orders, finances, and settings are scoped to their organisation.
- 06
Audit Trail
Field-level change tracking across all entities. Every create, update, and delete is logged with old and new values, timestamp, and the user who made the change.
- 07
Password Recovery
Time-limited recovery codes sent via email. 6-digit verification codes with 5-minute expiry. Password reset without exposing the token.
- 08
API Key Authentication
Per-organisation API keys for the yafe-print-agent. Keys are scoped to print job operations only, with no access to other data.
- 09
Data Ownership
Your data is yours. Export it at any time. We never sell it or use it for advertising. Data stays in the region you choose.
- 10
Vulnerability Reporting
Report security issues to security@yukta.app. We acknowledge within one business day and coordinate responsible disclosure.