How a transfer of ownership is protected

Fudi separates the initiation, verification and acceptance of a transfer:

• only the current owner can start it;
• the recipient must be an active member of the restaurant;
• if the owner's account uses a password, you must confirm it before receiving the code;
• accounts that access with Google or Apple and do not have a password go directly to verification by email;
• the code is single use and is tied to the exact request, the current owner and the purpose of transferring ownership;
• generating a new code revokes the previous one;
• only the chosen account can review, accept or reject the request;
• the acceptable request expires 48 hours after being submitted;
• Fudi maintains an audit trail with the people, subsequent role and branch scope applied.

The property change is first saved in Fudi. Notifications and subsequent application of a prepared payment method are processed independently, so a mail failure does not undo the already accepted transfer.