QX Enterprise

One platform.
Every branch. Every country.

QX runs multi-brand, multi-branch restaurant groups on a single platform — with the identity, controls, compliance and SLAs your CTO, CFO and COO all agreed on.

Group HQ · Live
Restaurant Group HQ
31 branches
SAR 189k
Today GMV
412
Active tables
99.98%
SLA
Riyadh
14 branches
SAR 1.42M
vs last wk
Jeddah
9 branches
SAR 812k
vs last wk
Dammam
5 branches
SAR 421k
vs last wk
Makkah
3 branches
SAR 268k
vs last wk
500+
Branches on one console
99.99%
Uptime SLA
<1.8s
P95 payment
KSA-native
Data residency
01Multi-brand, multi-branch

Run every brand and every branch from one console.

Groups get a real hierarchy — organisation, brands, regions, branches — with rolled-up finance and drill-down operations. Configure once, deploy everywhere, override where it matters.

Group hierarchy

Organisation → brands → regions → branches, cleanly separated.

Template & override

Push menus, prices and settings by brand, override per branch.

Regional rules

Currency, tax, language and hours per city — enforced.

Rollout controls

Stage changes to pilot branches before group-wide release.

Group tree
Restaurant Group
Organisation
Italian brand
Brand · 14 branches
Riyadh
Region
Branch · Kingdom Centre
Live · SAR 42k today
LIVE
Branch · Panorama Mall
Live · SAR 31k today
LIVE
Jeddah
Region
Branch · Corniche
Pilot · new menu v3
PILOT
Healthy brand
Brand · 9 branches
Steakhouse brand
Brand · 8 branches
02Identity & access

SSO, roles and audit — for a workforce of thousands.

Provision from your existing directory. Grant capabilities, not tabs. Every action is logged and searchable — from the CFO down to the newest waiter.

SAML & OIDC SSO

Okta, Azure AD, Google Workspace — SCIM provisioning included.

Role-based access

Capabilities scoped by brand, branch and function.

2FA everywhere

Enforced for admins; optional for staff, per role.

Immutable audit log

Every mutation logged, searchable, exportable.

Roles · SSO synced
Okta
Group CFO
1 users
Finance · allRead · allExport
Brand GM
3 users
Brand opsMenusStaff
Branch manager
31 users
FloorMenu 86Staff (branch)
Waiter
412 users
Guest opsBills
14:22 · branch manager · voided invoice #48213 · Riyadh branch
03Security by design

Encrypted, isolated, tokenized — end to end.

Row-level tenant isolation, token-vaulted card data, encryption in transit and at rest. Penetration tested continuously; zero card data ever touches your servers.

Tenant isolation

Row-level security across every table, enforced by the database.

AES-256 & TLS 1.3

Encrypted at rest and in transit; secrets in HSM-backed vaults.

Tokenized payments

PCI-DSS L1 network; PAN never touches your infrastructure.

Continuous testing

Automated scans, quarterly pentests, public bug bounty.

Defense in depth
L1
Guest device
TLS 1.3 · CSP · HSTS
L2
QX edge
WAF · rate-limit · bot mitigation
L3
API
OAuth2 · scoped tokens
L4
Data plane
Row-level security · AES-256
L5
Payments
Tokenized · PCI-DSS L1
04KSA-native compliance

ZATCA phase-2. Arabic-first. Built in KSA.

e-Invoicing, VAT, Arabic receipts and data residency inside the Kingdom — not bolted on, but core. QX ships compliant on day one, and stays compliant on your behalf.

ZATCA phase-2

Signed e-invoices, QR codes, XML clearance, archive.

15% VAT + tax groups

Zero-rated, exempt, inclusive/exclusive — configured per branch.

Arabic-first UI

Full RTL across guest, staff and merchant surfaces.

Data residency

Guest and transaction data stored inside KSA.

e-Invoice · Cleared
INV-2026-014883
ZATCA ✓
Subtotal
SAR 260.00
VAT 15%
SAR 39.00
Total
SAR 299.00
TLV QR · signed
CSID · CRN · timestamp
05Reliability & SLAs

99.99% uptime. Real numbers. Real credits.

A public status page, transparent incident history, and SLAs that come with service credits — not asterisks. Because you can't take Friday night off.

99.99% uptime SLA

Backed by service credits when we miss.

Multi-region failover

Active-active regions with automatic traffic shifting.

Offline resilience

Guests can browse and pay through brief network dips.

Live status page

Real-time incident reporting and post-mortems.

status.qxpayment.com
All systems operational
● Live
Payments
99.99%
Guest QR
100.00%
Staff API
99.98%
Merchant console
99.99%
Realtime events
99.97%
06Integrations & APIs

Plug into every system already running your group.

Certified POS integrations, ERP-ready exports, event webhooks, and a documented API for anything custom. Your finance team keeps their tools; QX just makes them work harder.

Certified POS

Foodics, Marn, Rezku, Oracle Simphony, Toast (roadmap).

ERP-ready

SAP, Oracle NetSuite, Odoo — exports and daily reconciliations.

REST + webhooks

Every event streamed to your systems, signed and idempotent.

Data export

Nightly SFTP or S3 drops of orders, payments and payouts.

POS · Certified
Foodics
Marn
Rezku
Oracle
Toast
Custom
ERP · Data & finance
SAP
NetSuite
Odoo
Dynamics
# Webhook
POST https://erp.group.com/hooks/qx
event: payment.settled
signature: sha256=…
07Migration

A 90-day path from signature to steady state.

QX doesn't drop software and disappear. A dedicated squad — solutions, engineering and CSM — moves your group from kickoff to full rollout, on a plan you approve.

01
Discovery

Group audit — brands, POS, ERP, ZATCA setup.

02
Blueprint

Data model, roles and rollout plan signed off.

03
Pilot branches

Two branches live with QX in 2–3 weeks.

04
Group rollout

Wave-based deployment across every branch.

05
Steady state

Named CSM, quarterly business reviews.

08Support that shows up

A named team, awake when your restaurants are.

Every enterprise account gets a Customer Success Manager, a technical account contact and a dedicated Slack or Teams channel — with response times measured in minutes, not tickets.

24/7 P1 response

15-minute response for revenue-impacting incidents.

Named CSM & TAM

The same faces from onboarding through renewal.

Quarterly reviews

Business reviews with revenue, adoption and roadmap.

Sandbox environment

A dedicated test tenant that mirrors production.

#al-faisal-qx · Slack
Named channel
Online
Faisal · Group CFO09:12
Payout for Jeddah region hasn't posted yet.
Sara · QX CSM09:13
On it — checking with payments. ETA 15 min.
QX Bot09:26
Payout batch #2833 settled — 9 branches · SAR 812,410.
Auto-notification
Trust & controls

Certifications your security team already asks about.

PCI-DSS L1

Card data never touches your servers.

ZATCA phase-2

e-invoicing cleared with the ZATCA gateway.

AES-256 · TLS 1.3

Encrypted at rest and in transit.

KSA data residency

Guest & transaction data stored inside the Kingdom.

SSO · SAML / OIDC

SCIM provisioning from your directory.

Immutable audit log

Every action logged, searchable, exportable.

Ready when your group is.
Every branch. Every brand.

Book a working session with a QX solutions architect. We'll map your group, your POS, your compliance — and a plan to go live in 90 days.