Omnix
Security & reliability

Software you can depend on for years.

The honest, architectural reasons Omnix is safe to run your business on for the next decade — not marketing promises, but how the app is actually built.

Offline-first architecture

Omnix is a native Windows app with its own embedded SQLite database. It is not a website that needs an internet connection. Power dies, the line drops, the modem fails — the till keeps trading. M-Pesa receipts queue, KRA receipts queue, payment reconciliations queue. Everything syncs the moment the line returns. There is no fallback "offline mode"; offline is the mode.

Your data lives on your machine

The database lives on your own PC, protected by your Windows account. It is never on someone else's server. We cannot see your books, suppliers, customers, or staff. Stop paying for support and the software keeps working — you do not lose access to your own data. Every backup Omnix takes (both local and cloud) is encrypted with a key only you hold.

Automatic local + cloud backup

Local backups every hour to a folder of your choice; cloud snapshots (encrypted with a key derived from your licence) to your own Cloudflare R2 or S3 bucket. Restore to a fresh machine with one click and your licence key. A stolen laptop never means a lost business.

Signed updates, quietly applied

Every release is built and signed by us; the in-app updater verifies the signature before it installs. Updates download in the background and install when you close the app — like a modern code editor. Roll back to any prior version through the dashboard if you ever need to.

LAN multi-device, no monthly seats

Add more terminals on the same network as you grow. They share live stock and sales over your LAN through Omnix's own sync server — no per-seat subscription, no internet dependency. A single extra-device licence is a one-time KES 10,000.

Permissions, audit log, RBAC

Real authentication with Argon2-hashed passwords, custom roles, and granular permissions. Every sensitive action — voids, refunds, stock adjustments, login attempts — is recorded to an immutable audit log you can review or export.

The plain facts

Standards, specified.

Backup encryption
AES-256 (local + cloud)
Password hashing
Argon2id
Update signature
Minisign · verified pre-install
Licensing
RSA-signed, device-bound
Backup encryption
AES-256 · key derived from licence
PII redaction (AI)
Pre-flight regex scrub

Run the whole business properly.

Security & reliability — Omnix · Omnix