Compliance, Security & Localization

TajerGo, the UAE-built restaurant operating system that combines POS, inventory, purchasing, Khata, AI insights, and VAT compliance in one platform, treats compliance as a core feature rather than a bolt-on. Every receipt, every login event, every data request, and every manager override is recorded, structured, and exportable so that UAE restaurants can face an FTA audit, a PDPL data subject request, or an internal investigation without scrambling for records.

What compliance, security, and localization features does TajerGo include?

• VAT/TRN-ready receiptsThermal receipts carry the business TRN, a full VAT breakdown (rate and amount), and are labeled as either a simplified tax invoice or a full tax invoice depending on the transaction, meeting FTA documentation requirements out of the box.
• FTA-compliant QR public invoiceEvery receipt includes a QR code the customer can scan to load a token-verified public page showing line items, tax, total, payment method, and table; a verification badge confirms authenticity, and the page updates to show REFUNDED or CANCELLED status where applicable.
• Simplified vs full tax invoiceThe system automatically applies the correct invoice type based on the transaction context, so cashiers never choose the wrong format.
• Offline-first sellingCash and wallet orders queue locally when the internet is unavailable and sync automatically on reconnect, so the restaurant never stops selling and no transactions are lost; split and Khata orders require a live connection.
• 15-minute idle timeout + re-authenticationAfter 15 minutes of no input, a re-auth modal requires the cashier's password before the terminal can be used again; three consecutive failures trigger a full logout, preventing unattended-terminal misuse.
• Manager re-authentication on void, refund, and overrideBefore processing a void, refund, price override, or discount override, the system requires a manager password, creating a two-person control layer on high-risk actions and producing an automatic audit record of who approved what.
• Privacy notice at point of collection (English and Arabic)Before capturing any customer personal data — during registration, loyalty enrolment, or voice ordering — a PDPL/GDPR-aligned notice displays the data controller, collection purpose, legal basis, retention period, and the customer's rights, in the language set for the session; acknowledgements are held in-memory only and cleared on logout.
• PDPL personal-data export and deletionThe admin portal provides a one-click export of a customer's personal data as a structured JSON file and a confirmed account deletion flow (requiring the user to type DELETE), with financial and legal audit records retained separately as required by UAE law.
• Audit logs (email, WhatsApp, branch, and tenant)Full delivery logs for all email and WhatsApp communications, plus a change history covering branch-level and system-level activity including logins, role changes, settings edits, and data exports; every log entry is timestamped and attributed.
• Bilingual English/Arabic interface with RTLThe entire POS terminal and receipt output operate in English and Arabic with automatic right-to-left layout switching, so staff can work in their preferred language and Arabic-speaking customers receive Arabic receipts without any manual formatting.
• Legal documentsVersioned Terms of Service and Privacy Policy are accessible in-app and are locale-aware, so merchants always have access to the version they agreed to.

How compliance and security work in TajerGo

VAT and FTA invoice compliance

TajerGo stores the business TRN once in Settings and propagates it to every receipt and invoice automatically. Each thermal receipt is labeled as a simplified tax invoice (for counter sales under the FTA threshold) or a full tax invoice (for B2B and higher-value transactions) without requiring cashier judgment. The VAT rate, VAT amount, and net and gross totals are printed as separate line items in the format the FTA expects. The QR code on each receipt opens a public invoice page hosted by TajerGo that is token-verified — customers can confirm authenticity without calling the restaurant, and the page shows a REFUNDED or CANCELLED badge if the transaction status changes after printing. X and Z shift reports include VAT subtotals and are exportable to CSV, giving accountants and auditors the period-level VAT ledger they need.

Security and access controls

Manager re-authentication creates a hard checkpoint before any action that could conceal fraud: voiding an order, processing a refund, applying a price override, or applying a discount override. The cashier's action is paused, a modal requests the manager's password, and only on successful authentication does the action proceed — with the manager's identity recorded in the audit trail. The 15-minute idle timeout runs independently: if a cashier steps away and the terminal sits idle, it locks automatically without any staff action required, and three failed re-auth attempts log out the session entirely. The KDS (kitchen display system) uses a separate 4-digit PIN with server-side bcrypt verification and a 5-attempt lockout, so kitchen tablets stay secure on shared devices.

PDPL and privacy compliance

UAE restaurants collecting customer names, phone numbers, or loyalty records must comply with the UAE Personal Data Protection Law (PDPL). TajerGo surfaces a bilingual notice at every point of data collection, not buried in a terms-acceptance checkbox — it appears on screen in English or Arabic before the cashier registers a customer or enrols them in loyalty. In the admin portal, the Privacy and Your Data section gives the account owner one-click tools to export any customer's data as a JSON file or to confirm full account deletion, covering the PDPL right of access and right to erasure. Financial records required for FTA and legal retention are kept separately from deleted personal data.

Audit logs and accountability

Every email sent by the system and every WhatsApp digest delivered is logged with timestamp and delivery status, so the owner can confirm a customer received a statement or a staff member received a shift summary. Branch-level and tenant-level audit logs record every settings change, login, role modification, and data export with the acting user's identity. Combined with the manager re-auth records, this gives UAE restaurant owners a complete chain of custody for every significant action taken in the system.

Who is this for?

• UAE restaurant owners who need to pass an FTA VAT audit without manually assembling records.
• Multi-branch operators who need standardized compliance across all outlets without relying on individual cashier judgment.
• Restaurant managers responsible for loss prevention who need a verifiable record of every override, void, and refund.
• Arabic-speaking staff and customers who need a fully native Arabic experience at the till and on receipts.
• Any UAE food and beverage business subject to PDPL that collects customer personal data for loyalty or credit programs.

Why it matters for UAE restaurants

UAE restaurants face compliance obligations that most generic POS systems were not designed to meet. The FTA requires that VAT be itemized correctly on every receipt, that TRN numbers appear on tax invoices, and that records are retained for seven years. The PDPL requires informed consent at the point of collection and the ability to honor data subject requests. Operating a restaurant in Arabic — or serving Arabic-speaking customers — means the receipt, the POS interface, and the privacy notice all need to work correctly in RTL Arabic, not just translated text in a left-to-right layout.

TajerGo addresses all of these without requiring the owner to configure third-party plugins or manage multiple compliance tools. The VAT configuration, TRN storage, receipt labeling, PDPL export and deletion tools, audit logs, and bilingual RTL support are all included at every subscription tier, starting from AED 499 per branch. Restaurants that operate offline — during internet outages or in locations with unreliable connectivity — continue selling with cash and wallet orders queued locally, ensuring no gap in transaction records.

Want the deep-dive guide? Read the related TajerGo guide for the full walkthrough.

Explore more TajerGo features