Discuss your project

FOR STORE & ONLINE SHOP

Store, shop and warehouse in sync.

POS systems, web shop, merchandise management and branches have to work together. We secure payment flows, customer data and operations across all channels.

RETAIL & E-COMMERCE / STARTING POINT

What shapes
your everyday work.

  • 01

    Many channels, one inventory

    Store, online shop and marketplace access the same merchandise management data. If one link fails, sales stall.

  • 02

    Payment pages in the crosshairs

    Scripts on order and payment pages are a point of attack. That is why the card payment standard PCI DSS requires them to be controlled.

  • 03

    Seasons and changing teams

    Temporary staff and new store employees need access quickly, and it has to disappear just as quickly when they leave.

RETAIL & E-COMMERCE / YOUR BENEFIT

What you
gain.

  • 01

    Keep sales running

    Operate POS systems, networks and merchandise management with coordinated recovery.

  • 02

    Protect customer data

    Secure the shop, payment pages and accounts according to the state of the art.

  • 03

    Run branches simply

    Connect new sites and devices following a uniform pattern.

SERVICES & SCOPE

Responsibility starts with clarity.

We clarify in advance which services make sense, who is responsible for what and how you can tell that progress is being made.

  • Branch networks, WLAN and SD-WAN
  • POS and workplace operations
  • Web shop security and payment pages
  • Email protection against invoice fraud
  • Backup for merchandise management and shop data

FRAMEWORK & OBLIGATIONS

What laws and
standards require.

General guidance with sources, as of October 2026. It does not replace legal advice; the assessment of each individual case remains with you.
  • Accessibility

    Accessibility in online retail

    Since June 28, 2025, e-commerce services for consumers have had to be accessible (§ 2(2) no. 6 Accessibility Act, BaFG). Microenterprises with fewer than ten employees and no more than €2 million in turnover or balance sheet total are exempt for services (§ 3 no. 19, § 6(1)).

  • INDUSTRY STANDARD

    Card payments under PCI DSS

    Anyone who processes card data or operates payment pages follows PCI DSS, currently version 4.0.1. The future-dated requirements have applied since March 31, 2025, including control of scripts on payment pages (requirements 6.4.3 and 11.6.1).

  • LAW

    Cookies only with consent

    Data on end devices may only be collected with active consent based on clear information, unless storage is strictly necessary for the transmission or for the service explicitly requested (§ 165(3) TKG 2021).

  • BAO & UGB

    Cash register and receipts

    From annual revenue of €15,000 per business, cash receipts must be recorded individually with an electronic recording system, provided cash sales exceed €7,500; card payments count as cash sales (§ 131b BAO). Receipts must be kept for seven years (§ 132 BAO).

START FOR FREE

Check it
today.

Tools from the TOMORIS Toolbox, free of charge and without an account. A check provides pointers, not a security guarantee.

WHAT SETS US APART

One partner.
Not four.

  • 01FROM A SINGLE SOURCE

    Projects, operations, knowledge, software

    EXPERTS implements, GRID operates, UNIVERSITY enables your team, NEXT develops further – without handover gaps between different service providers.

  • 02OWN PLATFORM

    Operations with GRID

    Monitoring, backup, security and updates work together in one operating model with clear responsibility.

  • 03TRANSPARENCY

    Everything in view with INSIGHT

    Tickets, reports and roadmap in one role-based customer portal instead of scattered across emails.

  • 04PROXIMITY

    Personal in DACH

    Locations in Marchtrenk, Frankfurt am Main and Zurich – with personal points of contact.

FREQUENTLY ASKED QUESTIONS

Answered
briefly.

Does our online shop have to be accessible?

Since June 28, 2025, the Accessibility Act (BaFG) has applied to e-commerce services for consumers. Microenterprises with fewer than ten employees and no more than €2 million in turnover or balance sheet total are exempt. When we develop web applications for you, we take keyboard operation, contrast and understandable forms into account from the start.

We use an external payment provider. Does PCI DSS still apply?

Yes, even then requirements remain, for example for the page that redirects to payment or embeds a payment form. You clarify with your payment service provider which self-assessment questionnaire applies; we implement the technical measures with you.

Is an online retailer covered by NIS2?

Online marketplaces and food wholesale are sectors under the Austrian NIS Act (NISG 2026), generally from medium size. Whether your offering counts as an online marketplace depends on whether other merchants sell to consumers through it. The NIS2 applicability check classifies your information and cites the section.

YOUR NEXT STEP

Let’s take the
next step.

Discuss retail IT. Personal and without obligation.