Security

Security at HempOS

HempOS is built to protect business records, COAs, product documents, field capture data, and customer accounts.

Account Security

  • Authenticated account access
  • Password reset support
  • Role-based permissions
  • Admin, customer, contractor, and regional access separation

Data Access

  • Customers access only their own business records
  • Contractors access only assigned sales or field workflows
  • Regional partners see team activity, not private tax or payment data
  • Admin access is restricted to authorized platform operators

Document Handling

  • COAs, product photos, labels, QR records, documents, audit packets, and backups are stored inside the HempOS system
  • Upload size limits are enforced
  • Public COA pages expose only public-safe verification data

Payments

  • Payments are processed through Square
  • HempOS does not store full card numbers
  • Billing status controls access to exports and paid features

Backups

  • Customers can generate backup exports
  • Audit packets and records can be downloaded where plan access allows

Responsible Disclosure

If you believe you found a security issue, contact HempOS support.

[email protected]

Payments

All HempOS billing — setup fees, monthly subscriptions, custom-quote invoices, and consultation fees — is processed directly by HempOS through Square. There are no exceptions and no parallel channels.

How a HempOS invoice arrives

Sales reps and contractors do not collect payment

HempOS sales representatives, field contractors, regional partners, and any other person introduced to you in connection with HempOS will never collect payment of any kind. This includes — and is not limited to — the following payment rails, which a rep will never ask you to use to pay them:

What reps can do

Reps can share a referral link, walk you through plan selection, answer compliance questions, schedule a Planning Call, and help during onboarding. Their commission is paid by HempOS based on the actual HempOS payment you make on the website — they do not need to touch your money to be compensated.

If something looks wrong

If anyone claiming to be from HempOS asks you to pay them directly, or to use a payment channel not listed above, do not pay. Stop the conversation and contact us at [email protected]. We will verify whether the person is actually a HempOS representative, confirm what (if anything) you owe, and tell you exactly how to pay it.

This policy applies to every HempOS plan — Retail, Multi-Location, Brand, Manufacturing, Compliance Cleanup, Planning Call, and any custom-quote engagement.