Supported POS operations continue on a previously authorized device during temporary internet loss. Sales are stored locally and automatically sync when your connection returns. Not every admin function works offline — cloud reports require connectivity.
On an authorized device that previously synced, you can keep ringing supported transactions — cash sales, inventory deduction, utang entries.
Transactions queue in an encrypted-at-rest IndexedDB. Reload the browser or close the app — everything survives.
When your connection returns the queue flushes with idempotency keys. Even if the network drops mid-sync, you never get duplicate sales.
Staff still clock in with their PIN. We store a PBKDF2-hashed verifier locally — never the raw PIN.
Admin changes, cloud reports and features that depend on live cloud data are paused. The core selling flow keeps running.