Trust & security
Your money and your customers’ data, protected
Tapp is built so the smallest business can take payments with confidence. Card details stay with our payment partner Adyen, every connection is encrypted and every business is verified before it gets paid — so you can focus on the counter, not the small print.
Core protections
What’s protected, and how
Every Tapp account comes with the same protections — there’s nothing extra to buy and nothing to switch on.
Hi, Maya
Set up a new password. Make sure it's strong and unique
Password
••••••••••••- Password must be at least 8 characters long.
- Password must include an uppercase letter, a lowercase letter, a number, and a special character (e.g., @, $).
Payouts go straight to your bank
- + more
Every protection on this page comes with every Tapp account. There’s no security add-on to buy.
Your account, locked to you
Each person signs in with their own email and password. New owners confirm their email and phone with six-digit codes, and a forgotten password is reset with an emailed code that expires after 15 minutes.
What Tapp collects
- Your business details, to set up and verify your account
- Sale and payout records, so your books add up
- Basic device and login info, to keep your account secure
What Tapp never does
- Store your customers’ full card numbers
- Keep your password as readable text
- Sell your data or your customers’ data
Data & privacy
Your data stays yours
Tapp ApS is a Danish company, built for the GDPR and UK GDPR. We collect what’s needed to run your business, and your customers’ data is processed only on your instructions.
GDPR and UK GDPR
You can access, correct or delete your data at any time, and account deletion can be requested right from your profile in the app.
Hosted on AWS in London
Tapp’s servers and file storage run on Amazon Web Services in London. Card and payout details are held by Adyen.
No tracking cookies
This website runs no analytics and sets no advertising cookies, so there’s nothing you need to opt out of.
Voice recordings on a timer
Voice ordering is opt-in. If you use it, you choose how long transcripts and audio are kept, and Tapp deletes them automatically when that time is up.
Read the full details in our Privacy policy and Cookie policy.
Compliance
The standards we hold ourselves to
The rules behind the protections above, and who carries each of them.
PCI DSS
Card payments processed by Adyen, a PCI DSS compliant payment platform
Encryption in transit
TLS on every connection, passwords stored as bcrypt hashes
GDPR and UK GDPR
Tapp ApS in Denmark controls your account data and processes your customers’ data for you
KYC and anti-money laundering
Every business verified through Adyen before it takes payments
KassenSichV
TSE receipt signing with fiskaly and DSFinV-K exports for shops in Germany
Technology and payment partners
Powered by trusted partners
Payments powered by Adyen
Behind every card payment is Adyen, the licensed, PCI DSS compliant payments platform trusted by some of the world’s biggest brands. Adyen also pays out your takings.
Security questions every owner asks
AI answers from our Help Center. Please don’t include personal or payment details.
Be taking payments before your coffee goes cold
Set up in minutes, with no card machine to rent — just the phone already in your pocket.