A security-focused architecture, built into the platform.
Role-based access control, tenant data isolation, secure authentication, audit trails and encrypted infrastructure — the practices behind how Indian Mercado protects your data.
Role-based access control
Every user signs in with their own account and permissions. Access to sensitive areas — pricing, reports, settings — is limited by role, not shared across a single login.
Tenant data isolation
Each business account's data is logically separated from every other account on the platform, so one business never has access to another business's data.
Secure authentication
Accounts are protected by secure, industry-standard authentication, with session handling designed to keep logins protected on shared and public devices.
Audit trails for key actions
Key actions — such as price changes, inventory adjustments and user management — are recorded, so changes can be traced back to who made them and when.
Encrypted infrastructure
Data is encrypted in transit between your devices and our servers, and the underlying infrastructure is built on encrypted, managed cloud services.
Security-focused architecture
Security is treated as a design requirement across the platform — from how accounts are structured to how data moves between the POS, inventory and reporting.
We are direct about what we do and do not have.
Indian Mercado does not hold formal certifications such as ISO 27001 or SOC 2 at this time. Rather than claim a compliance status we have not earned, we describe the actual practices built into the platform — role-based access, tenant isolation, secure authentication, audit trails and encrypted infrastructure — so you can evaluate them on their own terms.
Security questions, answered.
Is Indian Mercado ISO 27001 or SOC 2 certified?
No. Indian Mercado does not currently hold formal security certifications. The platform is built with a security-focused architecture — role-based access, tenant data isolation, secure authentication, audit trails and encrypted infrastructure — but this is not the same as holding a certified compliance framework.
Is my business's data separated from other businesses on the platform?
Yes. Each business account's data is logically isolated so it is not accessible to other accounts on the platform.
Can I control what each employee can see or do?
Yes. Access is role-based, so you can limit what each cashier, manager or staff account can view or change.
Who do I contact about a security question?
You can reach our team at contacto@indianmercado.com with any security-related question.
Have a specific security question?
Talk to our team directly and we'll answer what we can about how your data is handled.