SevenRooms

Supports modifier groups nested at least three levels deep, each level with independent min/max selection counts and a forced-selection (required) flag.

menu-pricing-nested-modifiers

NEW SURFACE (post-dates the prior note): PUBLIC VITE SOURCE MAPS on the guest booking SPA reached from https://www.sevenrooms.com/reservations/<venue> (which 302s to /explore/<venue>/reservations/create/search). The shell loads /static2/reservations/{index,vendor1,vendor2,vendor3,vendor4}-<hash>-135565.js; each has a live .js.map (3.8 + 2.4 + 1.6 + 8.1 + 10.1 MB) that begins {"version":3, and carries sourcesContent for every source: 3,993 sources in total. SOFT-200 CONTROL: /static2/reservations/ZZZNOPE.js.map returns 404 (79 bytes, Vercel NOT_FOUND), and /static2/reservations/.vite/manifest.json 404s the same way, so these are real maps, not SPA shells. vendor4 embeds SevenRooms' own first-party packages @sevenrooms/api@1.146.439 and @sevenrooms/domain@1.146.244 (vendor's own shipped code, grade B), which hold the operator-app API client: 99 distinct /api-yoa/* endpoint paths with their request/response mappers and the domain enums. CLAIM: modifier groups nested at least three levels deep, each level with independent min/max/required. VERDICT: unknown -> partial/B. EVIDENCE: SevenRooms' own @sevenrooms/domain declares a menu product-type enumeration in which modifier groups and modifiers are first-class objects, verbatim: "var be=(e=>(e.MENU_ITEM="MENU_ITEM",e.MODIFIER_GROUP="MODIFIER_GROUP",e.MODIFIER="MODIFIER",e))(be||{}),Ge=(i=>(i.MENU_ITEM="MENU_ITEM",i.MODIFIER_GROUP="MODIFIER_GROUP",i.MODIFIER="MODIFIER",i.ALL="ALL",i))(Ge||{})" (ProductTypesEnum / ProductTypesAllEnum). That settles the prior note's open question - the ordering module does model modifier groups, not just flat items. SHORTFALL (why not yes): the enum is a type tag only. Tokenised controls over SevenRooms' own code (src/ plus every @sevenrooms/* package) return 0 files for `portion` and `topping`, and no min_selection / max_selection / is_required field exists on any modifier structure - the only min/max/required fields found belong to reservation UPSELL categories (UpsellCategoryMinQuantityTypeEnum, "isRequired = minQuantityType !== 'NONE_REQUIRED'"), which is an adjacent feature. POISON NOTED: a naive case-insensitive `modifier` search hits 45 files, but 40 of them are third-party - MUI/Popper's `modifiers` option array and Adyen Checkout's `classNameModifiers` BEM helper; only the 5 SevenRooms files above are real. Nothing shows nesting depth. This guest bundle is not a census of the ordering product. Retrieved 2026-09-17. https://www.sevenrooms.com/static2/reservations/vendor4-CTk26fAd-135565.js.map · retrieved 2026-09-17 adversarially verified

A single modifier can carry different prices depending on the parent item and the selected size, configured as a matrix rather than by duplicating the modifier.

menu-pricing-modifier-price-by-parent-size

CLAIM: one modifier priced differently per parent item and size, as a matrix rather than by duplicating the modifier. VERDICT: no (moved from unknown). NEW SURFACE, 328th: THE WHOLE OPERATOR (MANAGER) APP, censused from a manifest the vendor publishes on its own PUBLIC login page. https://www.sevenrooms.com/login ships `window.CACHE_MAP`, 623 assignments = 311 distinct assets (forward + reverse map) under /static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/, each with an SRI hash; 96 of them are JavaScript (116 MB fetched, all HTTP 200, incl. app/manager/settings, settings-legacy, mgr-orders, mgr-settings, vg-users, app/manager/useraccesslevels, app/manager/activitylog). This is the back-office app itself, not the guest booking SPA the 323rd read. It carries SevenRooms Ordering's PRODUCT INVENTORY editor (i18n keys settings.nav.productInventoryCreateMenuItem / productInventoryCreateModifierGroup / productInventoryCreateModifier / eightySixProducts "86 Products"), so the module exists and is authored in SevenRooms. EVIDENCE: the complete product schema, verbatim from settings-legacy.js, base mapper `$l=function(t){return{id:t.id,name:t.name,description:t.description,displayId:t.display_id,type:t.type,typeDisplayName:t.type_display_name,menuNames:t.menu_names}}` plus per-type mappers: `W4=function(t){return kr(kr({},$l(t)),{},{type:"MODIFIER",price:eO(t.price),verifyAge:t.verify_age,taxRate:t.tax_rate,taxGroupId:t.tax_group_id,modifierGroupsToModifiers:t.modifier_groups_to_modifiers?rO(t.modifier_groups_to_modifiers):[]})}` and `U4=...{type:"MENU_ITEM",price:eO(t.price),verifyAge:...,taxRate:...,taxGroupId:...,productTags:...,menuNames:...,modifierGroupsToModifiers:...,imageUrls:...}`; the redux initial state in app/manager/settings.js is `Xb={MENU_ITEM:{id:"",type:"MENU_ITEM",price:0,taxRate:0},MODIFIER_GROUP:{id:"",type:"MODIFIER_GROUP",minAmount:1,maxAmount:1,allowOrderSameModifiers:!1,maxSameModifiersAmount:1,modifierItemIds:[]},MODIFIER:{id:"",type:"MODIFIER",price:0,taxRate:0}}`. A MODIFIER therefore carries ONE scalar `price` (integer cents, `tO=t=>Math.round(t*100)`) and one tax rate, full stop. `modifier_groups_to_modifiers` maps {modifier_group_id, modifier_ids} only - it attaches groups to a parent, it carries no price. There is no size axis, no parent-item dimension, and no override/matrix structure anywhere in the product model, so the same topping on a large and a small must be two separate MODIFIER records. BOUND/CONTROLS: denominator = the 96 JS assets of the CACHE_MAP manifest (the operator app; the guest widgets in the same manifest are included). Tokenised, word-boundary, case-insensitive, with a KNOWN-POSITIVE control run first (`\bfunction\b` matches; `allow_order_same_modifiers` 3 hits/1 file, `modifier_groups_to_modifiers` 6 hits/1 file, `max_same_modifiers_amount` 2 hits/1 file - so the regexes work). ZERO hits across all 96 files: `price_override`, `priceOverride`, `sizePrice`, `size_price`, `parentItem`, `parent_item`, `topping`, `toppings`, `halves`, `modifier_group`, `menu_item`. POISON NAMED: `modifiers` scores 768 hits but is almost entirely react-dates calendar-day modifiers (`modifiers.has('blocked-calendar')`) - the 323rd's guest-bundle count was this artefact; `matrix` is the CSS transform; `half`/`quarter`/`light`/`double` are date, font-weight and JS-type vocabulary. Bound to the operator app only: an unpublished partner API is not covered, and help.sevenrooms.com remains gated. Retrieved 2026-09-18. https://www.sevenrooms.com/static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/settings-legacy.e83774ccefee1d70ded5.js · retrieved 2026-09-18 adversarially verified

Supports fractional/sectioned modifier placement (at minimum halves, ideally quarters) with independent pricing per section. differentiator

menu-pricing-fractional-placement

Not scored by this record.

The half-and-half pricing rule is operator-configurable among at least two of: charge the higher-priced half, average the halves, or charge each topping at a fraction of full price. differentiator

menu-pricing-half-and-half-rule

Not scored by this record.

Supports modifier quantity tiers (light / regular / extra / double) with a configurable price multiplier per tier, distinct from adding the modifier twice.

menu-pricing-topping-quantity-tiers

CLAIM: modifier quantity tiers (light/regular/extra/double) with a configurable price multiplier per tier, distinct from adding the modifier twice. VERDICT: no (moved from unknown). NEW SURFACE, 328th: the same operator-app census described on menu-pricing-modifier-price-by-parent-size - `window.CACHE_MAP` on the public login page https://www.sevenrooms.com/login enumerates 311 assets of the manager app under /static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/, 96 JS files fetched at 200. EVIDENCE: SevenRooms' own Product Inventory model gives MODIFIER_GROUP exactly four quantity controls and no tier: `MODIFIER_GROUP:{id:"",type:"MODIFIER_GROUP",minAmount:1,maxAmount:1,allowOrderSameModifiers:!1,maxSameModifiersAmount:1,modifierItemIds:[]}` (app/manager/settings.js), serialised as `K4=function(t){return kr(kr({},$l(t)),{},{type:"MODIFIER_GROUP",modifierItemIds:t.modifier_item_ids,minAmount:t.min_amount,maxAmount:t.max_amount,allowOrderSameModifiers:t.allow_order_same_modifiers,maxSameModifiersAmount:t.max_same_modifiers_amount})}` (settings-legacy.js). The ONLY way to take more of a modifier is `allow_order_same_modifiers` / `max_same_modifiers_amount`, i.e. ordering the SAME modifier again up to a cap - which is precisely the mechanism the claim says a tier must be distinct from - and the price is then simply the MODIFIER's single scalar `price` multiplied by the repeat count. No tier enum, no per-tier multiplier field, no zero-charge 'light' concept exists on MODIFIER or MODIFIER_GROUP. BOUND/CONTROLS: denominator = the 96 JS assets of the published CACHE_MAP manifest; known-positive controls passed first (`allow_order_same_modifiers` 3, `max_same_modifiers_amount` 2, `\bfunction\b` positive). ZERO hits, tokenised/word-boundary/case-insensitive, across all 96: `topping`, `toppings`, `portions` beyond poison, `sizePrice`, `price_override`, `halves`. POISON NAMED AND EXCLUDED: `portion` (6 hits) is a spreadsheet-formula help string ("The string from which the left portion will be returned") and the email A/B-test label `testPortion:{...defaultMessage:"Test Portion"}`; `multiplier` (8 hits) is a marketing-stat number formatter, verbatim `case"multiplier":re="".concat(F(i),"x")` used for "2x" on the marketing dashboard; `tier` (312) is loyalty tiers; `extra`/`light`/`double` are UI and type vocabulary. Bound to the operator app; an unpublished partner API and the gated help centre are not covered. Retrieved 2026-09-18. https://www.sevenrooms.com/static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/app/manager/settings.e83774ccefee1d70ded5.js · retrieved 2026-09-18 adversarially verified

Item base price can be defined as a grid across two variant axes (e.g. size x crust/preparation) with a per-cell price override. differentiator

menu-pricing-size-style-matrix

Not scored by this record.

Items can define an included-modifier allowance (e.g. three toppings included) that automatically charges only for overage and credits or forbids substitutions per configuration. differentiator

menu-pricing-included-allowance

Not scored by this record.

Supports combo/meal construction where components can be swapped with a price delta, and the system can automatically detect and convert eligible a-la-carte items in the cart into the combo price.

menu-pricing-combos

Not scored by this record.

Upsell/suggestive-sell prompts can be configured per item and per channel (POS, kiosk, online), and the vendor reports attach-rate on those prompts. differentiator

menu-pricing-upsell-prompts

Not scored by this record.

A single 86 action propagates automatically to POS, KDS, the vendor's own online ordering, kiosk, and connected third-party marketplaces, with a documented propagation latency.

menu-pricing-86-propagation

Not scored by this record.

Supports per-item countdown/par counts that decrement on sale and automatically 86 the item at zero, with a scheduled auto-restore. differentiator

menu-pricing-countdown-auto-86

Not scored by this record.

Menus, individual items, and prices can be scheduled to activate and deactivate automatically by day and time in the location's own timezone.

menu-pricing-dayparting

Not scored by this record.

Supports distinct price books per channel (dine-in, pickup, delivery, kiosk, each third-party marketplace) including percentage-markup rules applied to a base price rather than manual per-item entry.

menu-pricing-channel-price-books

Not scored by this record.

Supports dual pricing / cash-discount at the item level with the card price displayed as the base price, applied consistently across POS, kiosk, and online ordering, and printed on the receipt. differentiator

menu-pricing-dual-pricing

Not scored by this record.

Menu changes can be staged as an effective-dated version, previewed before publish, and rolled back to a prior version after publish. differentiator

menu-pricing-versioning-effective-dates

Not scored by this record.

Supports a central corporate menu template pushed to locations with field-level governance controlling which attributes a location may override. differentiator

menu-pricing-franchise-hierarchy

Not scored by this record.

Stores allergen flags and nutrition values per item and publishes them to online ordering and third-party menus, and can derive nutrition from linked recipe components rather than manual entry.

menu-pricing-allergen-nutrition

Not scored by this record.

Menu items and modifiers can be linked to recipes/bills of materials so that a sale depletes theoretical inventory and yields item-level theoretical food cost. differentiator

menu-pricing-recipe-linkage

Not scored by this record.

Pushes menus to third-party marketplaces through a certified direct integration (not scraping or a menu-management middleman) and surfaces per-item sync status and rejection errors to the operator.

menu-pricing-3p-menu-push

Not scored by this record.

Supports rule-based dynamic pricing where item price varies automatically by time, demand, or channel, with configurable floor/ceiling guardrails.

menu-pricing-dynamic-pricing

Not scored by this record.

The POS operates with third-party payment processors of the merchant's choosing (documented list of supported processors/gateways) rather than requiring the vendor's in-house processing. differentiator

payments-processor-choice

Not scored by this record.

Vendor publishes card-processing pricing publicly (a specific flat rate or interchange-plus markup) rather than quote-only. differentiator

payments-published-rates

Not scored by this record.

Native dual-pricing / cash-discount mode stores two prices per item and prints both cash and card totals on the guest check and receipt. differentiator

payments-dual-pricing

Not scored by this record.

Surcharging engine automatically excludes debit and prepaid cards via BIN/product-code detection, enforces the network percentage cap, and can be enabled or disabled per location. differentiator

payments-surcharge-guardrails

Not scored by this record.

All first-party payment terminals accept EMV chip and NFC contactless including Apple Pay and Google Pay.

payments-emv-nfc

SevenRooms ships no payment terminal of its own, so the claim's subject does not exist. Its own Product and Service-Specific Terms (Last Updated February 4, 2026) put the hardware on the client's side of the line: implementing Contactless Order and Pay "may be made contingent upon its acquisition and integration of certain hardware and/or software applications", the service "may perform better when integrated with certain third-party systems, such as POS (e.g. Toast), QR code generators and payment processors (e.g. Stripe)", and "Client may be required to purchase additional hardware (such as printer boxes)". The only NFC in the product is the guest's own phone — "Users will also need to properly utilize the QR code or NFC functionality supported by their device" — and the venue-admin console's wallet toggle is card-not-present web checkout, not terminal contactless: "Adds Apple Pay and Google Pay buttons to the reservation widget for FreedomPay venues. Guests pay via native wallet authentication instead of manual card entry." Every occurrence of "terminal" in the console bundle is a third party's terminal identifier (Saferpay Terminal Id, Saferpay Moto Terminal Id, ValuTec gift-card Terminal ID). Across the corpus "Ingenico", "Verifone", "tap to pay", "magstripe" and "card-present" occur zero times; the 4 "EMV" hits are one generic blog post about choosing a POS and one "About FreedomPay" boilerplate paragraph describing FreedomPay's own P2PE/EMV validation. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://sevenrooms.com/product-specific-terms/ · retrieved 2026-09-08

Accepts contactless payments directly on a phone (Tap to Pay on iPhone and/or Android tap-to-pay) with no separate card reader. differentiator

payments-softpos-tap-to-pay

Not scored by this record.

Vendor ships a handheld that takes EMV/NFC payment at the table, including tip prompt and check splitting, without carrying the card away.

payments-pay-at-table

Not scored by this record.

Guest can scan a QR code on the printed check or table tent to view and pay the check from their own phone, with the payment closing the check in the POS automatically. differentiator

payments-qr-guest-pay

Not scored by this record.

Supports both pre-auth-then-tip-adjust and on-device tip prompt flows, with a documented batch/adjust window and a manager screen for unadjusted tips.

payments-tip-adjust

Not scored by this record.

Configurable tip pooling and distribution rules (by hours worked, sales, role percentage, or points) that produce a per-employee tip allocation exportable to payroll. differentiator

payments-tip-pooling

Not scored by this record.

Card payments can be captured while the internet is down via store-and-forward, with configurable per-transaction and cumulative offline limits. differentiator

payments-offline-store-and-forward

Not scored by this record.

Vendor publicly documents who bears the loss when a stored offline transaction declines on reconnect, and surfaces a post-reconnect report of failed offline payments. differentiator

payments-offline-decline-liability

Not scored by this record.

First-party gift cards with real-time balance tracking, redeemable across every location in the group and through the online-ordering channel.

payments-gift-cards

RESOLVED from unknown on 2026-09-08. The venue-admin console settles the conflicting signals the prior pass could not: SevenRooms' only gift-card surface is a third-party redemption integration, not a first-party gift card. The console section is headed "Redemption (Gift Card / Loyalty)" and contains exactly one control plus one provider's credentials — a "Redemption Platform(s)" multi-select ("-- select redemption platform(s) --") and the ValuTec fields "ValuTec Location ID", "ValuTec Terminal ID" and "ValuTec Client Key". There is no issuance, no balance record and no liability account anywhere in the product; SevenRooms redeems against a platform the operator already has. This matches the onboarding hub's Payments section, which enumerates only acquirer gateways (Stripe, FreedomPay, Network International, Cybersource, Adyen, Shift4) with no stored-value setup, and the pricing page's plan feature lists, which return zero hits for "gift card". The claim requires first-party gift cards with real-time balance tracking, so this is a no rather than a partial. Source: the venue-admin console template bundle SevenRooms serves publicly from www.sevenrooms.com/static/ (807,452 chars, fetched 2026-09-08) — the same templates that render the authenticated admin pages, including the venue-edit page whose 42 provisioning sections and the venue-group-edit page this cell rests on. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

House/on-account tabs with per-account credit limits, running balance, and periodic statement or invoice generation.

payments-house-accounts

Not scored by this record.

A single check can be settled with multiple tenders and split by seat, by item, by even shares, or by arbitrary amount, with no hard cap below eight ways.

payments-split-tender

Not scored by this record.

Voids, refunds, discounts, and no-sales require role-based authorization (manager PIN or approval) and write to an immutable audit log identifying the approver.

payments-refund-void-controls

CLAIM: voids, refunds, discounts and no-sales require role-based authorization and write to an immutable audit log identifying the approver. VERDICT: partial (moved from unknown). NEW SURFACE, 328th: the operator app itself, censused from `window.CACHE_MAP` on the public login page https://www.sevenrooms.com/login (311 assets, 96 JS fetched at 200 from /static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/). WHAT IS SATISFIED - refunds and charges are role-gated permissions, not open to all staff. The user-account form in production.site.templates.manager.js ships, verbatim: label `Refund Credit Cards on Reservations <span class="detail">// User can issue refunds against previous charges on a reservation (e.g., issue full or partial refunds for reservation-related payments).</span>`, `name:"f_can_refund",type:"checkbox"`, `labelclass:"addl-options addl-options-MANAGER addl-options-SUBMANAGER no-display"` (and the same shape for `f_can_charge`). app/manager/useraccesslevels.js states the Basic level `cannot:"Charge or refund cards, view other staff's client details, manage settings, or edit blocks."`. The client enforces it: `{canCharge:Me.features.can_charge,canRefund:Me.features.can_refund,...}` gates the refund UI in app/manager/orderslideout.js and app/manager/actualslideout.js. AND every order and every reservation carries an attributed activity log: the log-entry renderer (`data-test="sr-activity-log"`) prints `Ee.author_name`, `Ee.device`, `Ee.created_humanized`, `Ee.system_text` per entry. WHAT SHORTFALLS (named): (1) VOID is an ORDER STATUS, not a permissioned action - `{OPEN,CLOSED,VOID,FAILED_INJECTION,QUEUED,WORKING_ON_ORDER,READY_PICKUP,READY_DRIVER,WITH_DRIVER}` in mgr-orders.js/orderslideout.js, and setting it merely opens the refund modal (`O==="VOID"&&...a.push(R.J.manager2.orders.refundModal,...)`); there is NO can_void key in the 192-entry permission switch in app/commons.js. (2) There are no discount and no no-sale actions in the product at all. (3) IMMUTABILITY IS NOWHERE STATED: tokenised `\baudit\b` returns ZERO hits across all 96 JS files (known-positive control passed), and the 6 `immutable` hits are the Immutable.js library. (4) No manager PIN / step-up approval is required at the moment of a refund - app/manager/stepupauth.js exists but is not wired to refunds. Not a `no`: the module exists and refunds are genuinely role-gated. Retrieved 2026-09-18. https://www.sevenrooms.com/static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/legacy/templates/production.site.templates.manager.e83774ccefee1d70ded5.js · retrieved 2026-09-18 adversarially verified

In-product dispute/chargeback dashboard that lists open disputes and allows evidence submission assembled from the POS transaction record. differentiator

payments-chargeback-tooling

Not scored by this record.

Tokenized card-on-file for a guest profile, reusable across online ordering, phone orders, and in-store, with no PAN stored by the merchant. differentiator

payments-card-on-file

Not scored by this record.

Vendor publishes its deposit schedule and offers a next-day or same-day/instant funding option. differentiator

payments-payout-timing

Not scored by this record.

A single account can route settlement funds to different bank accounts per location or legal entity (separate MIDs or split settlement) under unified reporting. differentiator

payments-multi-entity-routing

Not scored by this record.

Vendor provides point-to-point encryption and a current PCI DSS 4.x Attestation of Compliance / P2PE listing available to merchants on request.

payments-p2pe-pci4

Not scored by this record.

Product includes a native in-house driver module: drivers are first-class entities with clock-in/out, assignment state (in-store / on-run / returning), and per-driver run history reportable from the POS itself (not via a third-party add-on).

delivery-driver-roster

Positive evidence of absence from the vendor's current contract, which disclaims the role outright. Product and Service-Specific Terms §A (Online Ordering Connection Platform, Last Updated February 4, 2026): "SevenRooms is merely providing a technology for online ordering by Client's guests for the purpose of Client's provision of delivery services, either by itself or via a so called “last mile” delivery services providers that actually deliver the products to guests", followed by "For clarity, this means that SevenRooms is not a product delivery provider." The client "retains sole responsibility for its delivery services". Drivers are therefore the client's or the Delivery Provider's staff, never entities in SevenRooms. Corpus controls: "driver assignment", "in-house driver", "driver app", "run history" and "driver availability" occur zero times; all 51 hits for driver/drivers are the "revenue driver" idiom, generic blog advice about hiring one's own delivery staff, or DoorDash's Dashers inside the DoorDash Alcohol Addendum. The 42 configuration sections of SevenRooms' own venue-admin console include no driver, dispatch or fleet section. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://sevenrooms.com/product-specific-terms/ · retrieved 2026-09-08

Provides a dedicated dispatch/expo screen showing undispatched orders, driver availability, and elapsed time per order, with multi-order run batching (assigning 2+ orders to one driver as a single run).

delivery-dispatch-board

Same contractual basis as the driver-roster cell: SevenRooms' Product and Service-Specific Terms (February 4, 2026) state "SevenRooms is not a product delivery provider" and place delivery with the client or a "last mile" Delivery Provider, so there is no dispatch to run. A dispatch/expo board with driver availability, elapsed time and multi-order run batching has no counterpart anywhere in the product: "undispatched", "driver availability", "elapsed time" and "multi-order run" occur zero times in 875 first-party documents, and the 11 "dispatch" hits are all jQuery's internal event.dispatch/dispatchEvent machinery in the site's own JS bundles, not a product surface. The venue-admin console's 42 provisioning sections cover reservations, waitlist, events, payments, VAT, POS, ordering, gift-card redemption, PMS, booking channels, Voice AI and concierge — none is dispatch or delivery operations. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://sevenrooms.com/product-specific-terms/ · retrieved 2026-09-08

Dispatch includes a live map view with geocoded stops and system-generated route sequencing (turn order optimization) for a multi-stop run, not just a static address list. differentiator

delivery-route-map

Not scored by this record.

Captures live driver GPS position from a driver-facing mobile app and surfaces it back to the dispatch screen. differentiator

delivery-driver-tracking

Not scored by this record.

Delivery areas can be defined as arbitrary map polygons or by drive-time isochrones, not solely as a radius or a ZIP/postcode list. differentiator

delivery-zones-polygon

Not scored by this record.

Each delivery zone carries its own independently configurable delivery fee, order minimum, and quoted promise time, applied automatically from the validated customer address.

delivery-zone-pricing

SevenRooms' own venue-admin console publishes its complete ordering fee model and it has no zone axis at all. The Ordering section carries exactly two money fields — "Order admin fee percentage" and "Order admin fee fixed amount" — both venue-wide, plus a "Tax Inclusive Venue" flag; there is no zone table, no per-zone minimum and no per-zone promise time. Across 875 first-party documents "delivery zone", "delivery zones", "delivery radius", "promise time", "address validation" and "validated address" occur zero times, and the 4 "delivery fee" hits are all editorial blog copy about the delivery market rather than a configurable field. This is consistent with the contract position that SevenRooms "is not a product delivery provider" (Product and Service-Specific Terms §A, February 4, 2026) — the fee for the delivery leg is set by the client or its "last mile" Delivery Provider, not in SevenRooms. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Address entry is validated/geocoded against a mapping service at order time and rejects or flags out-of-zone addresses before the order is accepted.

delivery-address-validation

Not scored by this record.

Tracks per-delivery driver compensation inputs — mileage or distance driven per run, per-delivery flat reimbursement, and driver-retained tips — and exports them to payroll as separate reimbursement vs. wage lines. differentiator

delivery-driver-comp

Not scored by this record.

Provides a driver cash bank / settle-up flow that reconciles cash collected, orders assigned, and tips owed at end of shift, producing a per-driver over/short figure.

delivery-cash-reconcile

Not scored by this record.

Can hand a first-party order to an on-demand courier marketplace (DoorDash Drive, Uber Direct, Nash, Relay or equivalent) natively from the POS, with the courier quote and status returning into the order record.

delivery-daas-dispatch

Not scored by this record.

Supports hybrid dispatch: rules that automatically overflow an order to a DaaS courier when no in-house driver is available, out of zone, or past a wait threshold. differentiator

delivery-daas-fallback

Not scored by this record.

Offers direct, first-party certified API integrations with DoorDash, Uber Eats, and Grubhub marketplaces (vendor-owned, not solely resold through Otter/Deliverect/Chowly/ItsaCheckmate middleware). differentiator

delivery-3p-direct-integration

Not scored by this record.

Third-party marketplace orders inject automatically into the POS as normal tickets that fire to KDS/printers without tablet re-keying or manual accept.

delivery-3p-injection

Not scored by this record.

Menu, pricing, modifiers, and photos publish from the POS master menu out to connected third-party marketplaces, including channel-specific price markups, without maintaining a separate menu in each portal.

delivery-menu-push

Not scored by this record.

Marking an item or modifier 86'd in the POS pushes item-level out-of-stock status to connected third-party channels in near real time, and restores it on availability (DoorDash requires item and item-option 86ing of new POS partners).

delivery-86-sync

Not scored by this record.

Store can be paused/deactivated on each connected third-party marketplace from inside the POS with a timed auto-reactivation, rather than only from each marketplace's own tablet or portal.

delivery-store-pause

Not scored by this record.

Produces a third-party reconciliation report matching marketplace payout deposits to POS-recorded 3P sales, itemizing commission, marketing fees, refunds/adjustments, and identifying missing or unpaid orders. differentiator

delivery-3p-reconciliation

Not scored by this record.

Vendor exposes integration health to the operator — failed/rejected order injections, connection status per channel, and alerts on failure — rather than failing silently. differentiator

delivery-injection-error-visibility

Not scored by this record.

Guests receive a branded order status / driver tracking page or SMS link on the restaurant's own domain for first-party delivery orders, driven by real order and driver state.

delivery-tracking-page

Not scored by this record.

Quoted delivery promise times adjust dynamically from current kitchen load, driver availability, and zone drive time, rather than a fixed per-store constant. differentiator

delivery-promise-time

Not scored by this record.

Vendor documents explicit offline behavior for delivery: whether cash delivery orders, driver assignment, and driver settlement continue during an internet outage.

delivery-offline-behavior

Not scored by this record.

Vendor ships a first-party, commission-free web ordering site on the restaurant's own branding/domain that writes orders directly into the POS with no per-order marketplace commission.

digital-first-party-web

Online ordering is a listed Operations Hub capability on the venue's own channels; commission terms and direct-to-POS write-back not documented. https://sevenrooms.com/ · retrieved 2026-08-01

The web/app ordering menu is generated from the same POS menu record as in-store — one item edit propagates to all first-party digital channels without a separate digital menu build.

digital-menu-single-source

Shortfall: the POS menu is the single source only where a middleware integration is configured; 'Menu Sync Updates' can be set to 'Paused for manual control', which lets the ordering menu drift from the POS record; and 'Filter Synced Menu Items' lets it carry a subset of that record. Propagation is one-way into the one ordering channel, not across a set of first-party digital channels. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Vendor offers a branded native iOS and Android ordering app (published under the restaurant's own brand in the App Store/Play Store), not only a mobile web page or a shared multi-restaurant marketplace app. differentiator

digital-native-app

Not scored by this record.

Guests can create an account with saved addresses, saved (tokenized) payment methods, and one-tap reorder of a previous order across first-party channels.

digital-account-saved-payment

The claim requires guest-created accounts with tokenized saved cards and one-tap reorder on first-party channels, and SevenRooms' own Product and Service-Specific Terms (Last Updated February 4, 2026) state the opposite for the one first-party ordering channel they still define: the Contactless Order and Pay section says venue guests 'will also be required to provide payment information for each transaction.' The other ordering product, the 'Online Ordering Connection Platform,' is defined only as technology facilitating ordering for the client's own delivery ('either by itself or via a so called last mile delivery services providers'), and none of the eleven products the terms enumerate includes a guest account, stored credential or reorder capability. Consistent with that, both first-party ordering marketing pages — sevenrooms.com/platform/online-ordering/ and sevenrooms.com/en/contactless-order-pay/ — now 301-redirect off-host to merchants.doordash.com/en-us/products/online-ordering (with SevenRooms referral UTM tags): post-acquisition, the consumer account-and-saved-card layer is DoorDash's marketplace product, which is not a first-party channel under this claim. https://sevenrooms.com/product-specific-terms/ · retrieved 2026-08-04

Digital checkout presents configurable or algorithmic upsell/cross-sell suggestions (rules-based add-ons or personalized recommendations from order history), with attach-rate reporting on those suggestions. differentiator

digital-upsell-engine

Not scored by this record.

Supports future/scheduled orders with per-daypart throttling — capacity limits on orders or items per time slot that automatically close slots when the kitchen is saturated.

digital-scheduled-pacing

Not scored by this record.

Single digital ordering flow supports pickup, curbside (with arrival check-in), dine-in/QR table ordering, and delivery, with mode-specific fees and prep timing.

digital-fulfillment-modes

Not scored by this record.

Supports guest-facing QR scan-to-order and/or scan-to-pay at the table that opens or attaches to the existing POS check, including splitting and tipping.

digital-qr-table

Not scored by this record.

Vendor ships a self-order kiosk running the same menu and modifier logic as the POS, with accessibility-compliant UI and unattended EMV payment. differentiator

digital-kiosk

Not scored by this record.

Supports group ordering: a shareable link where multiple participants add their own items to one order under a per-person or total spend cap, with split or single payment.

digital-group-ordering

Not scored by this record.

Offers a distinct catering ordering flow with separate catering menu/minimums, lead-time rules, quotes or proposals, deposits, and invoice/house-account or ACH payment terms. differentiator

digital-catering-portal

Not scored by this record.

Vendor offers AI voice phone ordering (native or a named certified partner) that answers inbound calls and injects the completed order into the POS without staff transcription. differentiator

digital-voice-ai-phone

Not scored by this record.

Supports AI voice ordering at the drive-thru lane, integrated with the POS menu/modifiers and with escalation-to-human handoff.

digital-drivethru-ai

Not scored by this record.

Supports conversational SMS or chat ordering/reordering (text-to-order or text-a-link) that lands in the POS.

digital-sms-ordering

Not scored by this record.

Supports Order with Google — the restaurant's direct ordering link is provisioned to the Google Business Profile as an ordering option (ideally set as 'Preferred by Business'), rather than leaving marketplace links as the only choice. differentiator

digital-google-order

Not scored by this record.

Supports Apple Business Connect ordering placement — an 'Order Food' custom action on the Apple Maps place card pointing at the vendor's first-party ordering flow.

digital-apple-business-connect

Not scored by this record.

Loyalty accrual and redemption work inside the first-party digital ordering flow using the same guest identity as in-store, not as a separate post-purchase enrollment.

digital-loyalty-attach

Not scored by this record.

Supports guest subscription / membership programs (recurring billing for a delivery-fee waiver, a per-period item entitlement, or a paid loyalty tier) managed in the platform.

digital-subscriptions

Not scored by this record.

Discounts, coupon codes, and loyalty offers are defined once and honored identically across POS, kiosk, and first-party digital channels, with channel eligibility controls.

digital-promo-parity

Not scored by this record.

Vendor documents that the operator owns and can export first-party guest records (email, phone, consented marketing status, order history) in bulk, without a fee or vendor approval. differentiator

digital-guest-data-ownership

Not scored by this record.

Digital checkout uses vendor-hosted fields or a hosted payment page so card data never touches the restaurant's page, with the vendor publishing PCI DSS 4.0 compliance (including the client-side script-integrity requirements effective March 2025) and supporting 3DS.

digital-checkout-pci-sca

Not scored by this record.

Digital channels support the same service-fee / dual-pricing / card-surcharge configuration as the POS, with the required guest-facing disclosure and correct handling of jurisdictions and card brands where surcharging is prohibited. differentiator

digital-surcharge-transparency

Not scored by this record.

Maintains a single guest profile that automatically merges transactions from in-store POS, first-party web/app ordering, and kiosk under one identity (phone or email match), with documented dedup/merge behavior.

guest-loyalty-unified-profile

CRM with guest profiles and segmentation spanning reservations, ordering and POS integrations; documented dedup/merge rules not public. https://sevenrooms.com/ · retrieved 2026-08-01

Orders arriving from third-party marketplaces (DoorDash, Uber Eats, Grubhub) attach to a native guest profile with usable guest identity rather than landing as anonymous tickets. differentiator

guest-loyalty-thirdparty-identity-attach

Not scored by this record.

Supports at least two of points-per-dollar, visit/punch-count, and spend-tier accrual as configuration, without custom development or a bolt-on loyalty vendor.

guest-loyalty-accrual-models

Loyalty is a named Guest Experience Hub capability; supported accrual mechanics are not enumerated publicly. https://sevenrooms.com/ · retrieved 2026-08-01

Supports status tiers with automatic promotion and demotion driven by rolling-window spend or visit counts. differentiator

guest-loyalty-tiers

Not scored by this record.

Documents explicitly what loyalty lookup, accrual, and redemption do when the POS loses connectivity (queue-and-reconcile vs blocked). differentiator

guest-loyalty-offline-behavior

Not scored by this record.

Offer/discount engine exposes explicit stacking and precedence rules (exclusive vs combinable, order of application) as configuration. differentiator

guest-loyalty-offer-stacking-rules

Not scored by this record.

Offers can be issued to a dynamically defined audience (rules over recency, frequency, spend, or items purchased) rather than only broadcast to the whole list. differentiator

guest-loyalty-targeted-offers

Not scored by this record.

Automatically computes recency/frequency/monetary or equivalent lifecycle segments (new, regular, at-risk, lapsed, VIP) without the operator building the queries. differentiator

guest-loyalty-rfm-segmentation

Not scored by this record.

Ships triggered lifecycle automations (birthday, first-visit thank-you, lapsed win-back) as configurable always-on campaigns rather than one-off manual sends.

guest-loyalty-lifecycle-automation

Marketing Hub covers segmentation plus email/SMS campaigns; always-on birthday/win-back templates not explicitly documented. https://sevenrooms.com/ · retrieved 2026-08-01

Sends both email and SMS campaigns natively from the platform, not solely by handing the list to a third-party ESP. differentiator

guest-loyalty-native-email-sms

Not scored by this record.

Captures per-channel marketing consent with timestamp and source of consent, and honors revocation received by any reasonable means (not just the STOP keyword) across all channels.

guest-loyalty-consent-management

Not scored by this record.

Handles or explicitly documents A2P 10DLC brand and campaign registration required for the operator to send SMS through the platform.

guest-loyalty-10dlc-registration

Not scored by this record.

Reports redemption and incremental sales attributable to a specific campaign or offer, tying redeemed offers to actual check totals. differentiator

guest-loyalty-campaign-attribution

Not scored by this record.

Provides self-serve export of the full guest list and transaction history, including contact PII, via CSV or API, without a vendor fee or support ticket. differentiator

guest-loyalty-data-export-portability

Not scored by this record.

Exposes a documented outbound guest and order event API or webhook stream that a CDP or marketing platform can subscribe to (e.g. Olo, Punchh, Bridg, Klaviyo). differentiator

guest-loyalty-cdp-event-api

Not scored by this record.

Triggers post-transaction feedback requests and routes responses by score, sending low scores to private service recovery and high scores toward public review sites. differentiator

guest-loyalty-review-capture-routing

Not scored by this record.

Includes a native referral mechanic with per-guest codes or links, attribution of the referred guest's first order, and two-sided rewards.

guest-loyalty-referral-program

Not scored by this record.

Issues an Apple Wallet or Google Wallet loyalty pass with push-updatable balance, as an alternative to requiring a branded app download. differentiator

guest-loyalty-wallet-pass

Not scored by this record.

Provides admin tooling to fulfill guest data access and deletion requests (CCPA/CPRA-style) including deletion propagation to loyalty and marketing records.

guest-loyalty-privacy-rights-tooling

Not scored by this record.

Enforces loyalty fraud controls such as redemption velocity limits, manager approval on manual point adjustments, and flagging of employee self-redemption, with an audit log.

guest-loyalty-redemption-fraud-controls

Not scored by this record.

Vendor documents AI/ML-generated recommendations for offer content, target audience, or send timing (claim-level; verify it is a shipped product feature, not a roadmap statement). differentiator

guest-loyalty-ai-offer-recommendation

Not scored by this record.

Offers native stored-value/gift card balances tied to the same guest profile and redeemable across all locations of the brand.

guest-loyalty-stored-value-gift

Not scored by this record.

Employees clock in and out at the POS terminal using a PIN, badge, or card, with no separate time-clock hardware required.

labor-clock-in-at-pos

SevenRooms has no employee time-keeping surface, and it is not a POS terminal to clock in at. Its venue-admin console exposes 42 provisioning sections (general settings, availability, PMS, reporting, 7x, marketing, reservations, events, payments, VAT, POS, API, email, insights, nightlife, booking channels, ordering, gift-card redemption, consumer mobile, Voice AI, concierge and others) and none of them is labor, scheduling or time-keeping. Across 875 first-party documents "time clock", "time-clock", "clock out", "timecard", "time card", "timesheet" and "time sheet" occur zero times; the single "clock in" hit and the single "punch" hit are both blog posts advising readers what a restaurant POS or management system should do, not statements about SevenRooms. The one employee identifier the console does hold — "Transaction Services Employee Id", "Employee ID" under Ordering — is a credential used to inject orders into the client's POS under a POS employee record, which is the opposite of SevenRooms serving as the time clock. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Captures a photo at punch (or performs facial verification) attached to the timecard entry, with a photo-only mode available that stores no biometric template. differentiator

labor-photo-punch-verification

Not scored by this record.

Supports mobile clock-in restricted by geofence or location validation for staff who do not punch at a fixed terminal.

labor-geofenced-mobile-punch

Not scored by this record.

Records time punches while the POS is offline and reconciles them on reconnect without loss or duplicate entries, with the behavior documented. differentiator

labor-offline-time-punch

Not scored by this record.

Permissions are grantable per discrete action (void, comp, discount, refund, drawer open, price change, report access) per role and per location, not limited to fixed cashier/manager/admin tiers.

labor-granular-rbac

MERGE DOWNGRADE yes -> partial: the claim enumerates void, comp, discount, drawer open and price change; SevenRooms has no register, so its 67 per-action permissions cover refund/charge/report access but none of those. CLAIM: permissions grantable per discrete action, per role and per location, not limited to fixed tiers. VERDICT: yes (moved from unknown). NEW SURFACE, 328th: the operator app, censused from `window.CACHE_MAP` on the PUBLIC login page https://www.sevenrooms.com/login - 623 assignments = 311 distinct assets with SRI hashes under /static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/, 96 JS files fetched at 200. This replaces the SafeBase checkbox the cell rested on. EVIDENCE (vendor's own shipped code, grade B): app/manager/useraccesslevels.js publishes the access-level model and, verbatim, the rule that defeats the 'fixed tiers' objection: "These are the SevenRooms access levels and their recommended roles. If a user requires multiple additional permissions, we recommend assigning them to the higher access level. If they only need one or two extra permissions, you can enable those individually on the user's account as needed." The five levels are `privilegeLevel` SUPERUSER / MANAGER / SUBMANAGER / BASIC / ACTUALS ('Basic iPad'), each with Default, Optional and Cannot copy (e.g. Manager optional: "Manage user accounts, export data, or use booking overrides"; Basic cannot: "Charge or refund cards..."). PER DISCRETE ACTION: production.site.templates.manager.js renders the user-account form as 67 individually checkable `f_*` permissions (70 distinct `f_*` names in the file), each a `Nightloop.Base.FormElement({label:...,name:"f_...",type:"checkbox"})` bound to `e.content.venue_user.<name>` - among them f_can_refund, f_can_charge, f_view_reporting_full, f_data_client_export, f_data_actuals_export, f_view_only_looker_reports, f_has_floorplan_edit_permission, f_user_admin, f_sso_admin, f_payment_gateway_admin, f_book_wo_payment ('Bypass Required Booking Payment'), f_can_bypass_cancellation_charges, f_overbook_pacing, f_book_ot_rules, f_view_pos_check_data, f_view_all_contact_info, f_tag_client_edit. app/commons.js carries the matching 192-entry runtime key switch (can_charge, can_refund, can_override_payment_requirement, can_view_orders, can_view_reporting_full, can_edit_floorplan_layout, can_manage_sso, f_role_admin, f_administrate_venue_group_user_permission, ...). PER ROLE: each checkbox's `labelclass` encodes which levels may hold it, e.g. `addl-options addl-options-MANAGER addl-options-SUBMANAGER no-display`, and the templates ship a per-level defaults matrix mapping every f_* to true/false for SUPERUSER/MANAGER/SUBMANAGER/BASIC/ACTUALS. PER LOCATION: the permission bag hangs off `venue_user` (one row per user per venue; the 323rd's /api-yoa/venue/<id>/venue_users model exposes `privilegeLevel` + `extraPermissions`), with a separate venue-group tier (vg-users.js, f_administrate_venue_group_user_permission, f_export_venue_group_user_data, USERMANAGER 'User Manager Only accounts are limited to user management functionality'). SHORTFALL TO NOTE, not a downgrade of the structural claim: the enumeration contains no void, comp, discount, drawer-open or price-change permission, because SevenRooms has no cash register - the claim's parenthetical examples that DO exist (refund, report access) are individually grantable. Retrieved 2026-09-18. https://www.sevenrooms.com/static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/app/manager/useraccesslevels.e83774ccefee1d70ded5.js · retrieved 2026-09-18 adversarially verified

Manager overrides and approvals are attributed to the individual approver and written to an immutable audit trail queryable after the fact.

labor-manager-override-audit

CLAIM: manager overrides and approvals attributed to the individual approver, in an immutable audit trail queryable after the fact. VERDICT: partial (moved from unknown). NEW SURFACE, 328th: the operator app censused from `window.CACHE_MAP` on the public login page https://www.sevenrooms.com/login (311 assets, 96 JS at 200 under /static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/). WHAT IS SATISFIED - the audit trail is PER-RECORD AND ATTRIBUTED. Every order and every reservation slideout carries an 'ALL ACTIVITY' tab whose entry renderer is, verbatim, `Ee.author_name`, `Ee.device`, `Ee.created_humanized`, `Ee.system_text` inside `data-test="sr-activity-log"` (app/manager/orderslideout.js; the same shape in app/manager/actualslideout.js, which groups entries into Today / Yesterday / date buckets). So each logged action names its author, the device used, and a system-generated description. It is QUERYABLE after the fact at two levels: the venue Activity Log at `<manager_base_url>/activitylog` (legacy/activitylog.js) is a Reporting-tab report with a date-from/date-to range, a `user_select_filter` and a `category_select_filter` built from server-supplied `users-json` and `categories-json`, paginated, gated on `can_view_reporting_full`; and a group-level Activity Log under Group Reporting > Administrative at `/group/<id>/reporting/activity_log` (vg-reporting.js). OVERRIDES ARE FIRST-CLASS, PERMISSIONED ACTIONS: f_book_ot_rules 'Override Access Rule Table Blocks', f_overbook_pacing 'Override the Shift pacing per interval and party caps', f_overbook_inventory_limits, f_can_override_slots_on_grid, f_can_edit_maximum_total_covers_for_shift 'Override Shift Cover Limits', f_book_wo_payment 'Bypass Required Booking Payment', f_can_bypass_cancellation_charges 'User can waive a configured cancellation or no-show charge when canceling a reservation'; and approvals exist as f_require_approval 'User can submit reservation requests and a manager needs to approve the request for it to turn into a reservation'. SHORTFALLS (named): (1) IMMUTABILITY IS NOWHERE ASSERTED - tokenised `\baudit\b` returns ZERO hits across all 96 JS files (known-positive control passed first) and the `immutable` hits are the Immutable.js library. (2) Nothing shows an OVERRIDE or an APPROVAL specifically producing an entry: the only activity-log categories the client itself writes are configuration ones - `{category:"ACCESS",entity_object_id,new_data}` to /api-yoa/manager/<venueId>/activitylog/json (app/commons.js getAccessRuleActivityLogPreviews), `category:"SHIFTS"` and `category:"AVAILABILITY_MODES"` from manager.shifts.js and manager.paymentandpolicy.js - and the full category list is server-supplied, so no `no` is available on it either. Retrieved 2026-09-18. https://www.sevenrooms.com/static/df9454357771140f8ef0c5d8e0f5b27b36814991/cdn/app/manager/orderslideout.e83774ccefee1d70ded5.js · retrieved 2026-09-18 adversarially verified

Builds and publishes employee shift schedules inside the same platform that holds the timekeeping data, rather than requiring a third-party scheduling app. differentiator

labor-native-scheduling

Not scored by this record.

Generates recommended staffing levels or labor hours by daypart from the operator's own POS sales history, not just a static template. differentiator

labor-demand-labor-forecast

Not scored by this record.

Displays labor cost as a percentage of sales in real time during service on a manager view or POS, not only in end-of-day or next-morning reports. differentiator

labor-realtime-labor-percent

Not scored by this record.

Warns or blocks at clock-in when an employee is approaching or would cross a configured overtime threshold, before the overtime is incurred. differentiator

labor-overtime-prevention

Not scored by this record.

Configures meal and rest break rules per state or jurisdiction, prompts required break attestation, and flags missed breaks for premium pay. differentiator

labor-break-compliance-by-state

Not scored by this record.

Supports predictive-scheduling ordinances by tracking advance-notice deadlines for published schedules and calculating predictability pay owed for employer-initiated changes.

labor-fair-workweek-support

Not scored by this record.

Enforces minor-labor restrictions (age-based maximum hours, prohibited time windows, school-day limits) at both scheduling and clock-in.

labor-minor-labor-rules

Not scored by this record.

Computes tip pooling and tip-outs automatically per shift from configurable rules (percentage of sales, hours worked, points, or role), rather than requiring a manual spreadsheet.

labor-tip-pooling-rules

Not scored by this record.

Retains a per-shift, per-employee record of tips received, amounts contributed to the pool, and amounts distributed from the pool, exportable for audit.

labor-tip-distribution-audit-trail

Not scored by this record.

Payroll export separates cash from charged qualified tips and carries a Treasury tipped-occupation code, supporting the W-2 Box 12 code TP and Box 14b reporting required for tax year 2026. differentiator

labor-qualified-tips-w2-reporting

Not scored by this record.

Vendor processes payroll itself as a first-party product (tax filing and direct deposit), as opposed to exporting to a third-party payroll provider only. differentiator

labor-native-payroll

Not scored by this record.

Exports timecards, wages, and tips in documented formats or via direct integration for at least two major payroll providers (e.g. Gusto, ADP, Paychex, QuickBooks).

labor-payroll-export-formats

Not scored by this record.

Employees can request shift swaps or claim open shifts in a self-service app, subject to a manager approval workflow that enforces overtime and role eligibility. differentiator

labor-shift-swap-workflow

Not scored by this record.

Provides digital new-hire onboarding that collects W-4 and I-9 documentation and supports E-Verify submission.

labor-digital-onboarding-i9

Not scored by this record.

Reports per-employee sales performance metrics (average check, items or category attachment rate, void and comp rate) by server or cashier. differentiator

labor-server-performance-metrics

Not scored by this record.

Supports multi-level recipe/BOM costing where a recipe can contain sub-recipes (prep items) and plate cost recalculates automatically when any component ingredient's cost changes.

inventory-recipe-bom-costing

SevenRooms holds no ingredient layer to cost. Its venue-admin console's 42 provisioning sections contain no inventory, recipe or costing section, and the product's relationship to menu data is read-only mirroring rather than authorship: "Frequency polling for menu items and other POS data, in seconds" and the "Menu Sync Updates" toggle, whose tooltip reads "Controls auto-sync of POS/middleware menu changes to the ordering menu." Across 875 first-party documents "sub-recipe", "prep item", "bill of materials", "BOM" and "plate cost" occur zero times; the 42 "recipe" hits are culinary recipes, press-release headline wordplay (two releases title themselves on the word), and blog advice about what recipe costing in inventory software does for operators generally, and the 129 "food cost" hits are likewise editorial — none of either describes a SevenRooms feature. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Stores purchase unit, recipe unit, and count unit per item with explicit conversion factors, plus a yield/waste percentage applied to raw-to-usable conversion.

inventory-unit-conversion-yields

There is no stock item record in SevenRooms to carry purchase, recipe and count units, let alone conversion factors or yield percentages. "Purchase unit", "unit conversion", "conversion factor" and "par level" occur zero times across 875 first-party documents. The 10 "yield" hits carry no recipe sense: they are TheFork's "yield management" reservation technology, SevenRooms' own table-turn metric ("Maximize Floor Yield by up to 15%"), the ordinary verb, and one blog passage describing what inventory software does for operators generally. The console's 42 provisioning sections include no inventory area, and menu data is polled from the client's POS or middleware rather than maintained in SevenRooms ("Frequency polling for menu items and other POS data, in seconds"). Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Produces a theoretical-vs-actual usage variance report per item for a defined count period, showing theoretical usage from POS sales times recipe, actual usage from counts plus receipts, and the variance in both units and currency. differentiator

inventory-theoretical-vs-actual

Not scored by this record.

Depletes ingredient on-hand quantities in near real time as orders are fired at the POS, including depletion driven by modifier selections, not only in an end-of-day batch. differentiator

inventory-realtime-depletion

Not scored by this record.

Automatically 86s (marks unavailable) menu items on the POS, online ordering, and connected third-party delivery menus when a component ingredient hits zero or a configured threshold. differentiator

inventory-86-auto-sync

Not scored by this record.

Supports full physical inventory, ad-hoc spot counts of a subset, and scheduled recurring cycle counts, with each count's variance recorded as separate history rather than overwriting prior counts.

inventory-count-modes

No counting workflow of any kind exists in the product. "Cycle count", "spot count", "physical inventory", "stock count", "theoretical vs actual" and "variance report" occur zero times across 875 first-party documents; the two "inventory count" hits are in a blog post of general inventory-management best practice, and the single "count sheet" match is a false positive on "high thread-count sheets" in a hotel case study. SevenRooms' venue-admin console has no inventory section among its 42 provisioning areas. Where the corpus does discuss inventory it assigns it to the POS — the integrations directory sells partner systems on that basis, not SevenRooms. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Provides a mobile/tablet counting app supporting barcode or QR scanning that continues to accept counts with no network connectivity and syncs on reconnect.

inventory-mobile-count-offline

Not scored by this record.

Ships pre-built electronic vendor catalog and order-transmission integrations with named broadline distributors (e.g. Sysco, US Foods, Performance Food Group) that send purchase orders and receive invoices electronically rather than by emailed PDF. differentiator

inventory-vendor-catalogs-edi

Not scored by this record.

Ingests supplier invoices from photo, PDF, or email and extracts line-item detail (item, quantity, unit, price) into the inventory ledger without manual line entry. differentiator

inventory-invoice-ocr

Not scored by this record.

Tracks per-item purchase price history across invoices and alerts when a received price exceeds the prior or contracted price by a configurable threshold. differentiator

inventory-price-change-alerts

Not scored by this record.

Maintains par levels per item per location and generates suggested purchase order quantities from on-hand versus par, with at least one mode driven by a sales forecast rather than a static par. differentiator

inventory-par-auto-suggest

Not scored by this record.

Provides a structured waste/spoilage logging workflow with reason codes that debits inventory and reports waste cost separately from usage variance.

inventory-waste-logging

Not scored by this record.

Supports inter-location inventory transfers as a two-sided transaction crediting the sending location and debiting the receiving location, with an in-transit or approval state.

inventory-transfers

Not scored by this record.

Supports a commissary/central kitchen model where one location produces prep items and issues or sells them to other locations at a computed transfer cost.

inventory-commissary

Not scored by this record.

Captures lot/batch numbers at receiving and links them through production to sales or transfers, enabling a backward and forward recall trace.

inventory-lot-traceability

Not scored by this record.

Tracks expiration or use-by dates on received and prepped items and surfaces an expiring-soon report or alert before spoilage.

inventory-shelf-life-expiry

Not scored by this record.

Supports partial-bottle liquid inventory by weight (scale integration) or by bottle fraction for bar and beverage counting.

inventory-bar-partial-bottle

Not scored by this record.

Exports period COGS and accounts-payable invoice detail in a named accounting system's import format (e.g. QuickBooks, Sage Intacct, NetSuite) with GL account mapping configurable per item category.

inventory-cogs-gl-export

Not scored by this record.

Inventory and recipe costing are delivered natively by the POS vendor rather than requiring a separately-contracted third-party product (e.g. MarginEdge, MarketMan, Restaurant365) to function. differentiator

inventory-native-not-partner

Not scored by this record.

Joins recipe cost to actual item sales mix to report contribution margin per menu item, and flags items whose margin fell below a configured threshold after ingredient cost changes. differentiator

inventory-menu-margin-linkage

Not scored by this record.

Provides a live sales dashboard reflecting transactions within minutes of the sale, accessible from both a browser and a mobile app off-premise.

reporting-realtime-dashboard

Reporting is a named Operations Hub capability; live latency and off-premise mobile access not documented. https://sevenrooms.com/ · retrieved 2026-08-01

Generates a daily close-out/EOD report reconciling gross sales, net sales, tax, tips, discounts, refunds, tender types, and expected cash deposit in one document.

reporting-eod-closeout

Value upheld, RATIONALE CORRECTED on 2026-09-08. The prior rationale, "Holds no tender or drawer data", is false: SevenRooms' venue-admin console pulls exactly that from the client's POS. Its POS section configures "Tender media", "POS Revenue Center ID(s)", "Pulling frequency for Closed Checks" ("Frequency retrieving new closed check updates, in seconds"), "How far back in history to look for Closed Checks", and venue "Service Charge %", "VAT %" and "Municipality fee %". The cell is nevertheless no for a different and better reason: SevenRooms consumes the POS's closed checks, it does not produce the close-out. Its reporting surface is described by its own console as "Enables Looker-powered analytics dashboards for reservation trends, revenue, covers, and no-show rates. Without this, only basic built-in reports are available", with the revenue add-on "showing financial performance, payment breakdowns, and revenue per cover/shift" — a covers-and-reservations analytics axis, not a nightly reconciliation packet. Across 875 first-party documents "EOD", "end of day report", "end-of-day report", "Z-report", "tender type", "tender types" and "expected cash deposit" occur zero times, and the two "cash drawer" hits are a receipt-printer buying guide and a Star Micronics press release describing Star's own products. No document reconciles gross sales, net sales, tax, tips, discounts, refunds, tender types and expected cash deposit in one artefact. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Provides a product mix (PMIX) report at individual menu item AND modifier level with quantity, gross and net sales, filterable by daypart and revenue center.

reporting-pmix-modifier-level

SevenRooms' analytics axis is covers and reservations, not product mix. Its own venue-admin console describes the reporting product as "Enables Looker-powered analytics dashboards for reservation trends, revenue, covers, and no-show rates. Without this, only basic built-in reports are available", with the optional revenue dashboard "showing financial performance, payment breakdowns, and revenue per cover/shift" — no item or modifier dimension, no daypart or revenue-center filter over sales lines. Item-level data does reach SevenRooms ("Links on-premise POS orders to reservations automatically. Enriches guest profiles with spend and item-level dining data"), but it lands on the guest profile, not in a PMIX report. Across 875 first-party documents "PMIX report" appears once — and it is SevenRooms telling operators to consult one they already have elsewhere: "Review your PMIX report to see which dishes sell best during these holidays" (Online Ordering Calendar Tips guide). "Modifier-level" occurs zero times; the 8 hits for modifier/modifiers are blog and marketing copy. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Produces an audit report of comps, voids, discounts, and price overrides attributed to the employee who applied them and the manager who approved them, with reason codes and timestamps.

reporting-comps-voids-audit

Not scored by this record.

Reports cash over/short per drawer, per shift, and per employee, comparing counted cash to expected cash from tendered transactions and paid-outs.

reporting-cash-over-short

Not scored by this record.

Reports sales per labor hour and labor cost as a percentage of sales by hour, by department, and by employee, using actual clocked hours from the POS time clock.

reporting-labor-productivity

Not scored by this record.

Reports per-server metrics including average check, items per check, attachment rate for named categories, and tips as a percentage of sales. differentiator

reporting-server-scorecards

Not scored by this record.

Reports revenue and margin by fulfillment channel — dine-in, direct online, first-party delivery, and each third-party marketplace separately — net of marketplace commission fees. differentiator

reporting-channel-profitability

Not scored by this record.

Provides a consolidated multi-location report with side-by-side location comparison and drill-down from group total to a single location and then to an individual transaction. differentiator

reporting-multiloc-drilldown

Not scored by this record.

Includes a self-service report builder letting a non-developer choose dimensions, measures, and filters and save the result, rather than only fixed canned reports. differentiator

reporting-custom-report-builder

Not scored by this record.

Supports scheduling any report for automatic recurring delivery by email or to a shared destination on a defined cadence and recipient list.

reporting-scheduled-delivery

Not scored by this record.

Offers automated recurring bulk export of transaction-level raw data to a customer-controlled destination (S3, SFTP, Snowflake, BigQuery, or equivalent), not just manual CSV download. differentiator

reporting-raw-warehouse-export

Not scored by this record.

Publishes a documented public REST or GraphQL API covering orders, payments, menu, and labor data, with self-service developer credentials obtainable without a signed partner agreement. differentiator

reporting-public-api

Not scored by this record.

Emits outbound webhooks for order and payment lifecycle events to a customer-supplied endpoint, with documented retry behavior and payload signature verification. differentiator

reporting-webhooks

Not scored by this record.

API and raw-data access are included in the standard subscription rather than gated behind an additional per-location fee, revenue share, or enterprise-only contract. differentiator

reporting-api-not-upcharged

Not scored by this record.

Core reporting beyond basic sales summaries — labor vs sales, PMIX, comps/voids audit, multi-location comparison — is available on the entry-level paid plan rather than requiring a higher tier or an add-on analytics SKU. differentiator

reporting-tier-paywall

Not scored by this record.

Documents a historical retention window of at least 24 months of transaction-level detail queryable in the reporting UI, with no silent truncation or archive retrieval fee. differentiator

reporting-history-retention

Not scored by this record.

Sends proactive push or email alerts when an operator-configured metric breaches a threshold or deviates from its historical pattern (e.g. void spike, sales below forecast, discount rate anomaly). differentiator

reporting-anomaly-alerts

Not scored by this record.

Offers a natural-language query or AI assistant that answers ad-hoc questions against the operator's own sales and labor data and returns a figure or chart, not a generic help-article response.

reporting-nl-query

Not scored by this record.

Reports guest-level analytics including new versus returning guest counts, visit frequency, and lifetime spend cohorts tied to identifiable guest records from loyalty or online ordering. differentiator

reporting-guest-cohorts

Not scored by this record.

Produces a forward sales forecast at daypart or hourly granularity from the location's own history, exposed in the reporting UI and consumable by scheduling or ordering workflows. differentiator

reporting-sales-forecast

Not scored by this record.

Generates payroll- and tax-ready tip reporting: declared versus charged tips per employee, tip pool distribution detail, and a tax liability summary by jurisdiction.

reporting-tip-tax-compliance

Not scored by this record.

Supports a named organizational hierarchy of at least three levels (e.g. enterprise > region/group > location) as a first-class object that reporting and permissions can be scoped to, not just a flat list of locations.

multi-location-org-hierarchy

RESOLVED from unknown on 2026-09-08 by the venue-admin console's own templates, which the gated help centre had previously hidden. SevenRooms carries a named three-level hierarchy as first-class objects: Access Org > Venue Group > Venue. The venue-group-edit page has "Venue Group Name:" and an "Access Orgs(s):" multi-select ("-- select access org(s) --"), and the venue-edit page carries both a venue-group selector and its own access-orgs control. Reporting is scoped to the levels separately — the group page issues a "Looker Group User ID" and the venue page a "Looker Venue User ID", with "Reporting package(s)" assignable at each. Permissions scope to the hierarchy too: the group page controls "Lock user management from the venue level" and "Lock global reservation/client tag editing at the venue level", and group-wide behaviour such as "Duplicate booking detection across all venues in venue group" and "Enable Access Rule Bulk Copy" operates across the group as a unit. That is a hierarchy reporting and permissions are scoped to, not a flat location list. Source: the venue-admin console template bundle SevenRooms serves publicly from www.sevenrooms.com/static/ (807,452 chars, fetched 2026-09-08) — the same templates that render the authenticated admin pages, including the venue-edit page whose 42 provisioning sections and the venue-group-edit page this cell rests on. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

A corporate-level menu can be authored once and published to a chosen set of locations in a single action, with a publish/version history showing what was pushed, when, and by whom.

multi-location-central-menu-publish

RESOLVED from unknown on 2026-09-08 by the console templates the gated help centre had hidden. There is no corporate menu to author and no publish action to run. Menus are not a group-level object: the venue-group-edit page's settings are general info, access orgs, SSO, session timeout, client-data visibility, field locking, a PII retention policy, and reporting packages — it has no menu section at all. Menu content instead enters per venue, pulled from that venue's own "Middleware Integration" via "Middleware Location ID" / "Middleware Sub Location ID" and a "Frequency for Refreshing Menu Data" poll, so the authoring system of record is each location's POS or middleware rather than a corporate SevenRooms menu. Consequently there is no publish/version history: nothing records what menu was pushed to which locations, when, or by whom. Where SevenRooms does offer a group-level push it names it explicitly — "Enable Access Rule Bulk Copy" copies availability rules across the group — and no equivalent exists for menus. Source: the venue-admin console template bundle SevenRooms serves publicly from www.sevenrooms.com/static/ (807,452 chars, fetched 2026-09-08) — the same templates that render the authenticated admin pages, including the venue-edit page whose 42 provisioning sections and the venue-group-edit page this cell rests on. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Corporate menu items expose per-field override rules so a location can change some attributes (e.g. price, availability) while corporate locks others (e.g. name, image, recipe), and locked fields are not editable at store level. differentiator

multi-location-local-override-policy

Not scored by this record.

Supports price tiers/zones so one menu item carries different prices per location group, per order channel, and per daypart without duplicating the item record.

multi-location-price-zones

SevenRooms does not own the item record, so it cannot tier its price. Its venue-admin console states that the ordering menu is a mirror: the "Menu Sync Updates" toggle, whose tooltip reads "Controls auto-sync of POS/middleware menu changes to the ordering menu. Set to Enabled for automatic updates or Paused for manual control", fed by a "Middleware Integration" source and a "Frequency for Refreshing Menu Data" poll ("Frequency polling for menu items and other POS data, in seconds"). Prices therefore arrive from the client's POS or middleware per venue; there is no price-tier construct to attach a location group, order channel or daypart to. Across 875 first-party documents "price zone", "price zones", "per-location pricing" and "daypart pricing" occur zero times, and the only venue-level money fields in the ordering configuration are the flat "Order admin fee percentage" and "Order admin fee fixed amount". Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Menu, price, and promo changes can be scheduled to activate at a future date/time interpreted in each target location's own timezone, and can be rolled back after activation. differentiator

multi-location-scheduled-publish

Not scored by this record.

A new location can be provisioned by cloning a documented configuration template (menu, taxes, roles, printers, modifiers, tenders) rather than being configured from scratch, and the vendor publishes the expected time-to-open. differentiator

multi-location-new-store-template

Not scored by this record.

The permission model distinguishes a franchisor/corporate tenant from an independently-owned franchisee tenant, so corporate can see franchisee sales and enforce config while the franchisee owns its own employees, banking, and labor data. differentiator

multi-location-corp-vs-franchisee-roles

Not scored by this record.

Calculates franchise royalty, ad-fund, and marketing-fee amounts automatically from POS net sales on a defined schedule, with a configurable royalty basis (gross vs net of discounts/comps/third-party). differentiator

multi-location-royalty-calculation

Not scored by this record.

Supports automated ACH/debit collection of calculated royalties and fees from franchisee accounts, with a franchisee-visible statement of what was charged.

multi-location-royalty-collection

Not scored by this record.

Provides above-store reporting that aggregates sales, labor, discounts, voids, and item mix across any selected set of locations in one view, with store-vs-store ranking and variance flags.

multi-location-consolidated-reporting

Not scored by this record.

Item-level sales roll up across locations under a shared corporate item ID even when stores have renamed or locally priced the item. differentiator

multi-location-normalized-item-rollup

Not scored by this record.

Gift cards issued at one location are redeemable at any other location in the brand, with a reported outstanding-liability balance and inter-store settlement/redemption reconciliation between owners.

multi-location-cross-location-giftcard

Not scored by this record.

A single customer loyalty profile, balance, and stored order history is shared across all locations in the brand rather than being per-location.

multi-location-cross-location-loyalty

Not scored by this record.

A single location/terminal can operate two or more distinct brands or virtual brands with separate menus, receipts/branding, and separately reportable revenue, on the same hardware and drawer. differentiator

multi-location-multi-brand

Not scored by this record.

Tax configuration is per-location with support for multiple simultaneous tax rates, jurisdiction-specific rules (e.g. prepared-food vs grocery, inclusive vs exclusive tax), and per-location tax exemptions.

multi-location-multi-tax-jurisdiction

Not scored by this record.

Supports locations operating in different currencies and languages within one enterprise account, with consolidated reporting converted to a reporting currency.

multi-location-multi-currency-locale

Not scored by this record.

Produces an immutable audit log of who changed which configuration object (price, tax, permission, discount) at which location and when, exportable or queryable by corporate. differentiator

multi-location-config-audit-log

Not scored by this record.

Supports SSO via SAML or OIDC against the customer's identity provider for back-office/above-store users, with SCIM or equivalent for automated deprovisioning. differentiator

multi-location-enterprise-sso

Not scored by this record.

Publishes a documented multi-location API (or data warehouse/BI export) that returns transaction-level data across all locations in one authenticated call, without per-location credentials. differentiator

multi-location-enterprise-api

Not scored by this record.

Labor rules (overtime, break enforcement, predictive-scheduling compliance) are configurable per location or location group and enforced at the terminal, not just reported after the fact.

multi-location-central-labor-policy

Not scored by this record.

Public, self-serve API reference documentation is readable without a signed partner agreement, NDA, or sales call.

extensibility-public-api-docs

REPLACES an undated first-pass placeholder that said 'No self-serve public API reference reachable at check time', which was an unresolved search where positive evidence of absence exists. The vendor's own machine-readable index of its API documentation site settles it: /llms.txt returns HTTP 200 and is 116 bytes long, and its entire table of contents is one entry -- 'SevenRooms API Documentation' at /index.html.md. A documentation site that publishes a manifest of exactly one page is not withholding a reference we failed to find; it is stating that one page is all there is. That page (HTTP 200, 283,380 b, a GitBook shell whose rendered text is under 1 KB, re-read 2026-09-01) carries the gate notice this record's sibling cells have quoted since their own retrieval: 'Effective February 26, we have moved to individually provisioned accounts for access to our API documentation. API credentials, permissions, and integrations are not changing.' Prior holders are directed to email api-integration-support@sevenrooms.com and new integrators to a partnerships form -- which is precisely the signed partner agreement and sales call the claim excludes. There is no robots.txt on the host (HTTP 404, so permitted under RFC 9309 2.3.1.3). SHORTFALL, recorded not scored: this is evidence about the DOCUMENTATION being gated, and the notice explicitly says credentials, permissions and integrations are unchanged -- so it says nothing about whether the API itself is good, only that its reference is not public. https://api-docs.sevenrooms.com/llms.txt · retrieved 2026-09-01

API access is included in the base subscription at no additional per-location fee, surcharge, or upgraded plan requirement. differentiator

extensibility-api-access-cost

Not scored by this record.

The vendor publishes its partner/marketplace commercial terms (referral fee, revenue share percentage, or per-location partner fee) in public documentation.

extensibility-partner-revshare

Not scored by this record.

A free sandbox or test environment with seeded data is available to developers without owning a paid production account. differentiator

extensibility-free-sandbox

Not scored by this record.

Third-party apps authenticate via OAuth 2.0 with scoped, operator-granted, individually revocable permissions (not shared static API keys or credential sharing).

extensibility-oauth-partner-apps

NEW SURFACE (post-dates the prior note): PUBLIC VITE SOURCE MAPS on the guest booking SPA reached from https://www.sevenrooms.com/reservations/<venue> (which 302s to /explore/<venue>/reservations/create/search). The shell loads /static2/reservations/{index,vendor1,vendor2,vendor3,vendor4}-<hash>-135565.js; each has a live .js.map (3.8 + 2.4 + 1.6 + 8.1 + 10.1 MB) that begins {"version":3, and carries sourcesContent for every source: 3,993 sources in total. SOFT-200 CONTROL: /static2/reservations/ZZZNOPE.js.map returns 404 (79 bytes, Vercel NOT_FOUND), and /static2/reservations/.vite/manifest.json 404s the same way, so these are real maps, not SPA shells. vendor4 embeds SevenRooms' own first-party packages @sevenrooms/api@1.146.439 and @sevenrooms/domain@1.146.244 (vendor's own shipped code, grade B), which hold the operator-app API client: 99 distinct /api-yoa/* endpoint paths with their request/response mappers and the domain enums. CLAIM: third-party apps authenticate via OAuth 2.0 with scoped, operator-granted, individually revocable access. VERDICT: unknown -> partial/B. EVIDENCE: the same ClientApp mapper carries credentials, scopes and revocation, verbatim: "rateLimitMultiplier:t.rate_limit_multiplier,read:t.read,write:t.write,clientId:t.client_id,clientSecret:t.client_secret,isEntityGroupLevel:t.is_entity_group_level,name:t.name,isActive:t.is_active,customerContactEmail:t.customer_contact_email,customerContactName:t.customer_contact_name,permissions:{read:t.permissions?.read||false,write:t.permissions?.write||false,resourceOperationWhitelist:t.permissions?.resource_operation_whitelist||[],resourceOperationBlacklist:t.permissions?.resource_operation_blacklist||[]}", plus "audienceScope:t.audience_scope||{},preScopesLegacyIntegration:t.pre_scopes_legacy_integration" and "scopeOverride:t.scope_override". Revocation is first class: "c.deleteClientApp" (DELETE /api-yoa/admin/clientapps) and the isActive flag; access is scoped per resource-operation allow/deny list and per audience. SHORTFALL (why not yes): grants are administered through /api-yoa/ADMIN/clientapps with entityType/entityId, integrationOwner, apiAddOnEnabled and customerContactEmail/Name - i.e. SevenRooms staff provision a client app on a customer's behalf. There is no authorization-code or consent screen, no operator-facing app-authorisation or revoke UI, and a tokenised case-insensitive control for `oauth` over all 3,993 sources returns 0 files (0 in SevenRooms' own code too). So access is scoped and individually revocable but is not shown to be OAuth 2.0 or operator-granted. Retrieved 2026-09-17. https://www.sevenrooms.com/static2/reservations/vendor4-CTk26fAd-135565.js.map · retrieved 2026-09-17 adversarially verified

The platform pushes real-time webhooks for order lifecycle events (created, modified, paid, voided, refunded) rather than requiring polling.

extensibility-webhooks-push

NEW SURFACE (post-dates the prior note): PUBLIC VITE SOURCE MAPS on the guest booking SPA reached from https://www.sevenrooms.com/reservations/<venue> (which 302s to /explore/<venue>/reservations/create/search). The shell loads /static2/reservations/{index,vendor1,vendor2,vendor3,vendor4}-<hash>-135565.js; each has a live .js.map (3.8 + 2.4 + 1.6 + 8.1 + 10.1 MB) that begins {"version":3, and carries sourcesContent for every source: 3,993 sources in total. SOFT-200 CONTROL: /static2/reservations/ZZZNOPE.js.map returns 404 (79 bytes, Vercel NOT_FOUND), and /static2/reservations/.vite/manifest.json 404s the same way, so these are real maps, not SPA shells. vendor4 embeds SevenRooms' own first-party packages @sevenrooms/api@1.146.439 and @sevenrooms/domain@1.146.244 (vendor's own shipped code, grade B), which hold the operator-app API client: 99 distinct /api-yoa/* endpoint paths with their request/response mappers and the domain enums. CLAIM: the platform pushes real-time webhooks for order lifecycle events (created, modified, paid ...). VERDICT: unknown -> partial/B. EVIDENCE: the ClientApp mapper behind /api-yoa/admin/clientapps in @sevenrooms/api maps a first-class webhook subsystem, verbatim: "webhookEnabled:t.webhook_enabled,isWebhookConfigured:t.is_webhook_configured,messagesWebhookUrl:t.messages_webhook_url,webhookUrl:t.webhook_url,messagesWebhookEnabled:t.messages_webhook_enabled,webhookHeaders:t.webhook_headers.join("##"),webhookBatchSize:t.webhook_batch_size,webhookTimeoutDeadline:t.webhook_timeout_deadline,webhookMaxProcessBatchSize:t.webhook_max_process_batch_size,webhookApiVersion:t.webhook_api_version,webhookSubscribedEntityTypes:t.webhook_subscribed_entity_types,webhookSubscribedEventTypes:t.webhook_subscribed_event_types,webhookSubscribedConfig:t.webhook_subscribed_config,useSchemaValidation:t.use_schema_validation,webhookGenerateHeaderToken:t.webhook_generate_header_token,webhookExcludeHeaders:t.webhook_exclude_headers,webhookResolveLinkedEntities:t.webhook_resolve_linked_entities,webhookLeverageStaticIpProxy:t.webhook_leverage_static_ip_proxy,webhookPriorityQueue:t.webhook_priority_queue". So SevenRooms does push webhooks per API client, with per-client SUBSCRIBED ENTITY TYPES and SUBSCRIBED EVENT TYPES, a versioned payload, batching and a timeout deadline. SHORTFALL (why not yes): the entity/event type VALUES are server-supplied and are tree-shaken out of this bundle, so the claim's conjunct 'order lifecycle events (created, modified, paid)' is not evidenced. SevenRooms does own orders (/api-yoa/orders, /api-yoa/orders/<id>/status changeOrderStatus, /api-yoa/ordering/notification_settings, /api-yoa/ordering/room_numbers/<venueId>) but no order webhook topic is named anywhere in the 3,993 sources. webhook_generate_header_token is a header token, not a documented HMAC signature, and no retry/backoff is stated. This is a bundled admin client, not a published spec, and it is NOT a census. Retrieved 2026-09-17. https://www.sevenrooms.com/static2/reservations/vendor4-CTk26fAd-135565.js.map · retrieved 2026-09-17 adversarially verified

Webhooks are cryptographically signed (e.g. HMAC) AND documented to retry with backoff, with a replayable event log for missed deliveries. differentiator

extensibility-webhook-reliability

Not scored by this record.

A public write API accepts externally originated orders into the POS as first-class tickets that fire to KDS/printers and land in reporting.

extensibility-order-injection-api

Not scored by this record.

Menu items, modifiers, and prices can be written and updated via API, not just read. differentiator

extensibility-menu-write-api

Not scored by this record.

Every core object the API can read (orders, menu, customers, employees, inventory) can also be written or updated via the same API. differentiator

extensibility-data-symmetry

Not scored by this record.

API rate limits are published as specific numeric quotas with documented throttling behavior and headers.

extensibility-published-rate-limits

Not scored by this record.

The vendor is a named DoorDash Preferred Integration Partner (DPIP) under the 2026 program requirements. differentiator

extensibility-doordash-preferred

Not scored by this record.

Direct, first-party certified integrations exist with DoorDash, Uber Eats, and Grubhub without requiring a paid middleware layer (Otter/Chowly/Deliverect/Checkmate). differentiator

extensibility-first-party-delivery-integrations

Not scored by this record.

The POS is a supported endpoint for at least two major aggregation middleware platforms (Deliverect, Chowly, Otter, Checkmate, ItsaCheckmate).

extensibility-middleware-compatibility

Not scored by this record.

Native, vendor-maintained connectors exist for QuickBooks Online and at least one other GL/accounting system, with mapped journal entries rather than CSV-only export.

extensibility-accounting-connectors

Not scored by this record.

Labor hours export natively to at least two named payroll providers (e.g. Gusto, ADP, Paychex, Paylocity) without manual re-keying.

extensibility-payroll-export

Not scored by this record.

Raw transaction-level data can be exported on a schedule to a customer-controlled destination (S3/SFTP/warehouse/Snowflake share), not only viewed in the vendor's reporting UI. differentiator

extensibility-bi-data-warehouse

Not scored by this record.

The vendor operates a public integrations marketplace listing named third-party apps that operators can browse and self-install.

extensibility-app-marketplace

Not scored by this record.

Operators can define custom fields or run vendor-hosted custom logic/scripts against POS objects without a vendor engineering engagement.

extensibility-custom-fields-scripting

Not scored by this record.

The vendor supports a headless/embedded mode where a third-party UI (kiosk, web ordering, drive-thru) drives the POS transaction engine via API.

extensibility-headless-embedded

Not scored by this record.

The vendor publishes an API changelog and a stated deprecation/notice policy for breaking changes.

extensibility-api-versioning-deprecation

Not scored by this record.

A complete historical data export (orders, customers, menu, payments metadata) is available to the operator on demand, in a documented machine-readable format, at contract end. differentiator

extensibility-data-portability-exit

Not scored by this record.

Order entry, ticket routing, and check printing continue on-terminal when the internet connection is lost.

reliability-offline-order-entry

SevenRooms' architecture is server-side polling of a remote POS over HTTP, which cannot survive a WAN loss. Its own console exposes the poll intervals as first-class settings: "Frequency retrieveing new check updates, in seconds", "Frequency retrieving new closed check updates, in seconds", "Frequency polling for queued orders to inject, in seconds" and "Duration between each order update call, to prevent overloading the POS, in milliseconds". Across 875 first-party documents "store-and-forward", "works offline" and "without internet" occur zero times, and none of the 38 "offline" hits describes SevenRooms operating without a connection — they are the conversational-idiom sense (a review reply "Continue the conversation offline"), the "on- and offline" guest-journey phrase from one customer quotation reused across 20 pages, generic blog advice about what a POS should offer, and, tellingly, SevenRooms crediting the capability to a partner POS instead: the entry for Infrasys, "Try an enterprise-level, cloud POS with a fast, integrated and intuitive UX, offline capabilities and flexible hardware." Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

Card payments can be accepted while offline via store-and-forward, not just cash-only fallback. differentiator

reliability-offline-card-auth

Not scored by this record.

The vendor publicly documents who bears the loss when a store-and-forward transaction declines after connectivity returns, and states any per-transaction or cumulative offline cap. differentiator

reliability-offline-decline-liability

Not scored by this record.

Multiple terminals continue to share a single check/table state over the local network while the internet is down (LAN-only degraded operation, not per-terminal islands). differentiator

reliability-lan-degraded-multi-terminal

Not scored by this record.

The vendor documents a local/on-premise transaction engine or edge server (not purely cloud-hosted request/response) for the ordering path. differentiator

reliability-local-transaction-engine

Not scored by this record.

Kitchen display and/or kitchen printer routing continues to function while offline.

reliability-offline-kds-printing

SevenRooms does not route tickets to the line; it hands orders to the client's POS, which does. The console's ordering section is built around injection into that POS — "Frequency polling for queued orders to inject, in seconds", "Order injection spacing", "Tender ID", "Check/Order Type ID", "Profit Center ID" — and its only kitchen-facing construct, "Kitchen Signal Mapping", maps a menu item's service status onto a POS signal rather than driving a display or printer directly. Any printing hardware is the client's to buy: "Client may be required to purchase additional hardware (such as printer boxes)" (Product and Service-Specific Terms, February 4, 2026). Because the whole path is an HTTP call to a remote POS, there is nothing to continue when the connection drops, and "store-and-forward", "works offline" and "without internet" occur zero times across 875 first-party documents. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

The system automatically fails over to a backup printer or KDS station when a configured kitchen printer is unreachable, and alerts staff.

reliability-printer-fallback

There is no printer topology in SevenRooms to fail over within. The venue-admin console's 42 provisioning sections contain no printer routing, station or fallback configuration; printing hardware is explicitly the client's responsibility ("Client may be required to purchase additional hardware (such as printer boxes)", Product and Service-Specific Terms, February 4, 2026), and ticket delivery is an injection call into the client's POS rather than a print job SevenRooms owns. Across 875 first-party documents "backup printer", "back-up printer", "printer fallback", "printer failover", "failover" and "fail over" occur zero times, and the corpus's only sustained printer discussion is a buying guide for receipt printers that recommends third-party models. Frozen corpus for this pass: 875 first-party SevenRooms documents / 8,271,559 chars — the 750-loc www sitemap (all 200, no shaped hole), 103 off-sitemap same-host pages recovered from the corpus's own hrefs, 8 legal/onboarding pages, 31 go.sevenrooms.com PDFs, and the public venue-admin template bundle. 14 URLs whose final hop leaves SevenRooms-owned hosts (9 to merchants.doordash.com, 5 to careersatdoordash.com) were quarantined out, so no absence here rests on DoorDash's text. https://www.sevenrooms.com/static/4011e874666faed7d40d0ef472891ec4a0f383e1/cdn/legacy/templates/production.site.templates.712a5c34ce6032bd135e.js · retrieved 2026-09-08

The vendor documents its conflict-resolution behavior for edits made on two devices during a network partition (e.g. last-write-wins, merge, or operator prompt).

reliability-sync-conflict-handling

Not scored by this record.

The vendor publishes an explicit list of which features are unavailable offline (gift cards, loyalty lookup, refunds, manual card entry, text-to-pay).

reliability-offline-feature-matrix

Not scored by this record.

A public, per-component status page exists showing current and historical incident state without a login.

reliability-public-status-page

Not scored by this record.

A contractual uptime SLA with a stated percentage AND a service credit remedy is published or available in the standard agreement. differentiator

reliability-contractual-uptime-sla

Not scored by this record.

The vendor publishes written post-incident reports or root-cause summaries for major outages.

reliability-incident-postmortems

Not scored by this record.

24/7/365 live human support by phone is included in the base subscription, not sold as a premium support tier.

reliability-247-live-support

Not scored by this record.

The vendor offers in-person on-site installation and go-live support (first-party or certified dealer network), not remote-only self-install. differentiator

reliability-onsite-install

Not scored by this record.

The vendor performs the initial menu build as part of onboarding rather than leaving it entirely to the operator. differentiator

reliability-menu-build-service

Not scored by this record.

A hardware replacement/advance-exchange program with a stated turnaround time is included or purchasable.

reliability-hardware-replacement-sla

Not scored by this record.

Operators can trigger and retrieve their own data backup/restore, or the vendor publishes RPO/RTO figures for data recovery.

reliability-backup-restore

Not scored by this record.

The vendor publishes a current PCI DSS v4.0/4.0.1 Attestation of Compliance or equivalent (e.g. validated P2PE listing) covering the post-March-2025 future-dated requirements.

reliability-pci-dss-4-attestation

Not scored by this record.

Multi-factor authentication is enforceable on back-office and POS administrative logins, with role-based permissions.

reliability-mfa-role-based-access

Not scored by this record.

A public, free training library (video/LMS) and a practice/training mode on the terminal exist for staff onboarding.

reliability-self-serve-training

Not scored by this record.

Any terminal can assume the master/server role automatically if the designated primary terminal or local server fails. differentiator

reliability-failover-terminal-role

Not scored by this record.

Terminals support an automatic cellular/LTE failover for connectivity, first-party or documented.

reliability-cellular-backup

Not scored by this record.

Vendor publicly offers a month-to-month subscription with no minimum multi-year term commitment for its core POS software tier. differentiator

commercial-month-to-month-contract

Not scored by this record.

Vendor's published terms of service or MSA state no early termination fee / no liquidated damages for cancelling the software subscription before term end. differentiator

commercial-no-early-termination-fee

Not scored by this record.

The auto-renewal term and the required cancellation notice window (e.g. 30/60/90 days) are stated in publicly accessible contract terms rather than only in a signed quote.

commercial-autorenew-terms-published

The Master Services Agreement is published unauthenticated and states both halves of the claim. §6.2 Subscription Term: 'The initial term of each subscription to the Services will be described in the applicable Order Form... Except as otherwise described in an Order Form, subscriptions for each Service will automatically renew for additional periods equal in length to the expiring Subscription Term (each, a "Renewal Term") unless either party provides notice of non-renewal at least 90 days prior to commencement of the next Renewal Term.' So: renewal term equals the expiring term, opt-out window is 90 days. §5.1 additionally publishes the renewal uplift — 'The pricing of Fees for any renewal term of the applicable Order Form shall increase by up to 5% of the applicable pricing in the prior term, unless SevenRooms notifies Client of different pricing at least 30 days prior to the commencement of the applicable renewal term.' §6.2 also states that venue closure, sale or change of ownership is not a permissible cause for termination. Note the initial term length itself is still order-form-only; what is public is the renewal mechanic and the notice window, which is what the claim asks for. https://sevenrooms.com/msa/ · retrieved 2026-08-04

The POS software can be purchased and operated with a third-party payment processor of the operator's choice (no mandatory in-house processing lock). differentiator

commercial-processing-not-bundled

Not scored by this record.

Vendor publishes an interchange-plus (cost-plus) processing rate option with the markup stated as a specific bps + per-transaction figure, rather than only blended/flat card-present rates. differentiator

commercial-interchange-plus-published

Not scored by this record.

The processing agreement caps or prohibits unilateral vendor-initiated rate increases outside of pass-through interchange/network changes, or grants penalty-free exit on any increase. differentiator

commercial-rate-increase-clause

Not scored by this record.

Per-location and per-additional-terminal software pricing is published as specific dollar figures on the vendor's public site (not 'contact sales' only).

commercial-pricing-published

Pricing page names Starter/Growth/Premium but shows no dollar figures — every tier ends in the same "Get a quote" button. (Quotation corrected 2026-09-08: the prior note rendered this as "get a quote." with a sentence period inside the quotation marks; the source is a button label with neither.) https://sevenrooms.com/pricing/ · retrieved 2026-08-01

Individual modules (online ordering, KDS, loyalty, inventory, payroll, marketing) can be purchased à la carte and cancelled independently without repricing the base POS subscription. differentiator

commercial-module-unbundling

Not scored by this record.

All required terminals, KDS screens, and printers can be purchased outright at a published price, with no mandatory multi-year hardware lease or rental.

commercial-hardware-purchase-outright

Software-only; no proprietary terminals or mandatory hardware lease. https://sevenrooms.com/ · retrieved 2026-08-01

Vendor documents support for at least one non-proprietary/third-party hardware option (e.g. standard iPad, Epson/Star ESC/POS printers, generic cash drawer) rather than requiring vendor-only devices. differentiator

commercial-hardware-not-locked

Not scored by this record.

One-time implementation, menu-build, onboarding, and training fees are published as specific amounts or explicitly stated as $0.

commercial-implementation-fee-published

Not scored by this record.

Operators can self-serve export their full transactional history (orders, line items, payments, labor) to CSV or a documented API without contacting support or paying a fee.

commercial-data-export-self-serve

Not scored by this record.

Guest/customer records, loyalty balances or point ledgers, and gift-card liability balances are exportable in machine-readable form by the operator. differentiator

commercial-export-customer-and-loyalty

Not scored by this record.

Contract or documentation specifies a post-termination data retrieval window (a defined number of days during which the operator can still export their data) rather than immediate cutoff. differentiator

commercial-post-termination-export-window

Not scored by this record.

Published terms explicitly state the merchant owns its transaction and customer data, and constrain the vendor's right to use or resell that data (beyond aggregated/de-identified use) for its own products or marketing. differentiator

commercial-data-ownership-clause

Not scored by this record.

The POS is source-available or open source with a documented self-hosting option (source published under an OSI or source-available license, not merely an open API).

commercial-source-available-selfhost

Not scored by this record.

Vendor documents validated P2PE or hardware-encrypted card entry plus tokenization such that the merchant's PCI scope is reduced to SAQ A / SAQ P2PE-HW, and names the applicable SAQ.

commercial-pci-p2pe-tokenization

Not scored by this record.

Vendor documents PCI DSS v4.0.1 future-dated controls in effect since 31 Mar 2025 — notably MFA for all access to the cardholder data environment including POS and back-office logins, and (for hosted ordering pages) payment-page script integrity monitoring per Req 6.4.3/11.6.1.

commercial-pci-dss-4-controls

Not scored by this record.

Vendor states it holds a current SOC 2 Type II (or ISO 27001) attestation and will provide the report under NDA via a trust center or on request.

commercial-soc2-attestation

Not scored by this record.

Product provides in-app tooling for CCPA/CPRA and GDPR data-subject requests — locating, exporting, and deleting an individual guest's records — plus a published DPA the operator can execute.

commercial-privacy-dsar-tooling

Not scored by this record.

Vendor publishes an accessibility conformance report (VPAT/ACR) claiming WCAG 2.1 AA (or later) for its self-order kiosk and consumer web-ordering surfaces, including a documented tactile/audio non-visual access mode on kiosks. differentiator

commercial-wcag-kiosk-accessibility

Not scored by this record.

POS supports card-network-compliant dual pricing / cash discount or surcharging with automatic exclusion of debit and prepaid cards from any surcharge, and required receipt and menu-board disclosure of the fee. differentiator

commercial-dual-pricing-compliant

Not scored by this record.