The internet is optional. Selling is not.
Every sale is written to a local ledger on the device and signed there. The till keeps selling for days; the ledger syncs append-only and idempotently when the line is back, and nothing that was rejected is ever swallowed.
- A local ledger on the device
- Append-only, idempotent sync
- PIN sign-in works offline
- The sync-issues screen
A local ledger on the device
Receipts, payments, session events — each is a numbered event on the device. Power off, come back, carry on.
Append-only, idempotent sync
An event is sent once and acknowledged once; a retry returns the same answer. No duplicates, no gaps.
PIN sign-in works offline
Cashiers and their PINs are cached on the till. A shift can start before the router does.
The sync-issues screen
A sale the server rejects is listed with its reason, on the till and in the back office — never hidden, never auto-deleted.
ZATCA QR stays valid
Signing is local, so an offline receipt carries the same QR as a connected one. Reporting follows within the 24-hour window.
How long can a till stay offline?
Days. The limit is the ZATCA reporting window, which the till watches: it warns at 20 hours and refuses nothing until a reviewer decides.
What if two tills sell the same last unit offline?
Both sales stand — the shop sold what it sold. Stock reconciles on sync and the back office flags the negative balance.
See also
Offline-first point of sale — Basmtak Cashier
Every feature for 14 days, no card, no setup call needed.
Every feature, no device limit, no card, 14 days.