SaleStreams protects every transaction, admission and customer record with envelope encryption, hardware-backed key storage, and continuously rotated certificates — end to end.
Every layer of the platform — from checkout terminals to the API gateway — is designed around a zero-trust posture: nothing is processed unless it can be independently verified and decrypted.
No payload is trusted or processed unless it decrypts successfully with current key material. Every request is independently verified rather than assumed safe.
Application data is encrypted at the message level, not just in transit — outbound requests are sealed with the gateway's public certificate and only the intended recipient can decrypt them.
Private keys are held in a local secure enclave and never leave it. On Android hardware, keys are generated and used inside the device Keystore — hardware-backed via StrongBox where available, or the Trusted Execution Environment otherwise.
Certificates are refreshed daily with a 24-hour lifetime, limiting the exposure window of any single credential and ensuring compromised material expires quickly.
Connections to backend services run inside a dedicated encrypted tunnel, adding a network-layer barrier in addition to message-level encryption — two independent layers of protection.
Local key stores are backed up on a regular schedule. If anomalous activity is detected, the local store is purged and reinstated from the most recent trusted backup.
A simplified view of the startup and request flow that secures every SaleStreams device before it can transact.
On startup, each device opens an encrypted tunnel to our backend infrastructure before any application traffic flows.
The device authenticates using credentials held in its local secure key store — never stored in plain application state.
On successful authentication, the device requests a new short-lived certificate from our internal certificate authority.
Issued certificates and key material are written directly to the secure local store — never exported, never logged.
Each request and response is encrypted and decrypted using this key material — data that fails to decrypt is rejected outright, regardless of source.
SaleStreams is built to meet the regulatory and industry standards visitor attractions and their customers expect, backed by a resilient, multi-region hosting footprint.
We take the security of our platform seriously and welcome reports from the security research community. If you believe you've discovered a vulnerability in SaleStreams, please contact us at sales@salestreams.net with details so our team can investigate promptly.
For questions about our security architecture, compliance certifications, or a customer security review, please reach out via our contact page.
Our team can walk you through our architecture, certifications and data handling practices in detail.