The employee asks, the lead decides, the server checks.
Each company’s data is partitioned from the SQL session on and hosted in Canada. Thirteen roles, nine capabilities checked server-side, amounts absent rather than hidden on screen, a chained fiscal ledger. And the list of what is missing, country by country.
A role decides the screens, a capability decides the actions.
Manager, team lead, employee, cashier, accountant, HR, marketing, sales, support, buyer, head of production, analyst, read-only. The role opens the screens; sensitive actions require a capability, checked by the server on every request.
- Approve requests, never your own: leave, expense claim, purchase request.
- Manage the till: opening float, expected amount, variance, cash-outs, refunds, Z closing.
- Adjust stock, see the numbers, see salaries, manage the team, change settings, export, see health files.
- The owner has everything, and nobody can take it away. A manager can be limited to their shops.
Absent, not zero
Without “see the numbers”, the same screen opens without amounts. The server removes them before sending the page.
Checked by the server
A hidden button is not a protection. Every sensitive action is refused server-side if the capability is missing.
Every Z is chained to the previous one. Nothing gets rewritten.
Every closing carries the SHA-256 hash of the previous one: changing a past line breaks the chain, and the integrity check shows it. A public key lets you verify the ledger without access to the console. The archive is signed every month and every year.
- The server recomputes every ticket: the screen never sends a total, the terminal reads the card.
- Exports of your data as CSV, PDF or Excel, for the accountant or to leave.
Law 25 and GDPR, in Settings.
The screens exist, where they belong, with the rest of the settings.
Customer requests
Every request is tracked through to its answer. A designated officer, a policy, an incident register.
The health file
Allergies, treatments: protected by the “see health files” capability, never inferred from a role. Every lookup is logged.
See customersElectronic signatures
A seal on every signed document, and a public verification page, /signature/verifier, readable by a third party.
PIN clock-in locks in steps: five failed attempts, thirty seconds. Tablets are activated by a code and never show a price.
What we have, and what we do not.
Yoseri writes “certified” nowhere about itself. Here is the exact state, country by country, so you can decide before signing.
| Country | What the console does | What it does not have |
|---|---|---|
| Québec | GST/HST and QST line by line following the Revenu Québec forms, chained fiscal ledger, Law 25 screens, labour rules | MEV-WEB certification, required of dine-in food service and caterers. Retail, salons and take-out bakeries are not covered. |
| France | Chained fiscal ledger, Z closings, signed archive; publisher self-attestation possible | Electronic invoicing, mandatory since September 1, 2026: Yoseri is not connected to any accredited platform. |
| Spain | Chained fiscal ledger, Z closings, signed archive | Verifactu, expected in 2027. No certification. |
| United States | Tax profile per location, set by hand | No state tax engine. |
| United Kingdom | Tax profile, documents in English | No POS certification. |
Questions about security and compliance
Where is my data hosted?
In Canada. It is partitioned per company from the database session on: a query cannot read another company. You export it as CSV, PDF or Excel at any time.
What does an employee see without the right to see the numbers?
The same screen, without the amounts. The server removes them before sending: absent, not set to zero. A form sent back without those amounts never erases the stored value.
Does Yoseri comply with Law 25?
The dedicated screens are in Settings: customer requests, a designated officer, a policy, an incident register. A customer’s health file is protected by its own capability and every lookup is logged. Your company’s compliance also depends on your own practices.
Does the fiscal ledger replace a certification?
No, and we do not write that it does. Every Z closing is chained to the previous one by SHA-256, verifiable with a public key, archived and signed every month and every year. In Québec, dine-in food service requires a MEV-WEB certified system, which Yoseri does not have.
Can someone approve their own request?
No. Leave, expense claims, purchase requests: the “approve requests” capability never applies to your own. The server refuses, even for the manager.
Open the demo as an employee. Then as a manager.
You will see what each role sees, and what it does not.