Security in plain language. It behaves like a guest in your store.

Every connection is encrypted and authenticated, and data flows only outward. Nothing on the internet can connect back into your store.

It uses a wired connection and never joins your WiFi, it behaves like a guest in your store.

There is nothing to port-forward and nothing to expose. The unit opens its own outbound session, so it adds no attack surface to your network.

It only verifies that the path to your processor is available, it never inspects, stores or touches a transaction.

It measures reachability, latency and quality, not your business traffic. It cannot read what flows across your network.

Updates are authenticated and verified before they run, so the unit only ever executes code it can prove came from us.

Tamper-aware, if your site needs it.

The optional .duo sensor adds physical-tamper awareness to the base unit. It continuously listens to the radio environment around the device as a fingerprint, move the unit somewhere it shouldn’t be and it detects the change, locks itself out and raises an alert.

Everything above ships on every unit. The .duo is an add-on for unattended or high-risk sites: remote pump stations, cabinets and outdoor enclosures.