I'm back with more security and data protection related suggestions! This time, better and more precise activity logs.
As a business that has been using Square since around 2013, we think the current model is not sustainable.
As our business grows, we have more employees, and we have more legal requirements.
We should be able to see exactly what happens in the Square system. For example:
- See exactly when a team member logs into the Register (not punching in, but really typing in their code)
- See any setting or option modified. For example, if they clicked on discount, then cancelled because they were asked for a password but didn't have the appropriate permission, we should see that. Why? Because sometimes employees will explore around to test what they can do, but won't do something. We need to be able to see that sort of behaviour because it's a security risk. If they really needed to give a discount and were authorised to, they would have asked a manager.
- On the Square Dashboard, see every single change. Let it be an item price change, image upload, anything. Everything should be logged.