Staff and security
Cashiers sell, managers manage, and owners see everything. Vendora records what each person does, so when something goes wrong you can find out what happened.
Roles and permissions
A role is a set of ticks saying what its people can do. Global Admin can do everything and can't be edited, so nobody can lock the business out. Global Reader can look at everything and change nothing. Cashier covers the till, and you can tick more for your business. You can also make your own roles, like head cashier or stock clerk.
- People only see the menu items their role allows.
- Use "Served by" to credit a sale to the person who served the customer. Reports and commissions use it.
- Deactivate someone who has left. Their past sales stay on record.
Signing in
- Staff sign in with the company code, an email address and a password.
- You can protect an account with an authenticator app. After the password, it asks for the 6-digit code.
- A till PIN of 4 to 6 digits, or a fingerprint on the phone, gets a cashier back in quickly on a device that's already set up.
- With a PIN set, the web version locks itself after 15 minutes of nobody touching it.
- After several wrong passwords, sign-in is blocked for a while.
Seeing who did what
Access logs show who signed in and out, when, on which device and from which network address, including wrong passwords. The audit trail records who did what and when, and it includes actions that were refused. Passwords and codes are never recorded.
Fraud review
Vendora flags things worth a look: self-refunds, large cash-outs, manual wallet credits and stock write-offs above amounts you set. You review each one, then confirm a problem or dismiss it.
Time clock and commissions
Staff clock in and out so their hours are on record. Managers see who is clocked in right now, and a correction needs a reason. Commission rules can pay a percentage of every sale or a fixed amount per unit, for everything, one category, one product or one person. Refunds and voids take back what was earned, so the net figure is what you pay.
Questions people ask
Can a cashier see my profit?
Only if you give their role permission. Roles control which pages and actions each person gets, and the menu hides the rest.
Can the owner be locked out?
No. The Global Admin role always has every permission and can't be edited.
Is two-step sign-in available?
Yes. Registration asks the first administrator to set up an authenticator app, and the account then asks for the 6-digit code at sign-in.