Trust & Security
MenuList is built so your menu, business information, owner account, and public customer-facing information stay protected.
MenuList is operated by Neelvara Systems, an India-based business. Last reviewed: September 6, 2026.
For owners and teams who want the important facts without unnecessary technical noise.
Security and data integrity are built into the platform, from sign-in to public output.
Your menu, business information, and customer-facing content stay tied to your business account and public outputs.
Each business operates in its own tenant context so one business cannot read another business's data.
Owner sign-in and staff credentials are handled through Firebase and Google Auth patterns so MenuList does not store plain-text passwords or passcodes.
Owners can give staff only the access needed for their work, then reset or end that access when roles change.
Production website, owner app, and public menu traffic is served through HTTPS-capable managed hosting.
MenuList uses managed hosting, Firebase, Google Cloud, and payment-provider infrastructure rather than custom card-storage or database-hosting systems.
Where integrations are enabled, outbound requests can be verified so receiving systems know they came from MenuList.
MenuList shows business activity from menus and official pages without asking visitors to identify themselves.
The public menu should come from validated, owner-approved data rather than loose files or old screenshots.
MenuList does not currently hold ISO 27001 certification or a SOC 2 Type II report. Business registration and infrastructure-provider certifications do not certify MenuList. Documented controls are not a guarantee of compliance with privacy law.
A standard DPA and contractual subprocessor schedule are not currently published. Where a data-processing agreement is required, the applicable terms must be agreed before that processing begins. Contact our legal team before submitting personal data for such use. The Privacy Policy describes current processing; it is not a DPA.
legal@neelvara.comFor suspected impersonation, unlawful content, or rights infringement on a MenuList customer page, send the public URL and a short explanation. Do not send private records or sensitive attachments. Reports require review; sending a report does not guarantee removal.
hello@menulist.aiWe take security reports seriously. If you discover a vulnerability, contact us directly before public disclosure so we can address it.
Reach us at security@menulist.ai
The same care that protects your account also protects the public information your customers see.