Bookings, menus, online ordering, search. Written by the people building the product, between services.
A confirmation carrying only a total leaves the restaurant arguing from memory when a guest disputes the charge, and saying nothing at all about cancellation is itself a failure.
A price that was accurate when it was printed can still be presented in a misleading way, and no deadline anywhere tells a restaurant when the stale figure must come down.
A restaurant membership can be live in an afternoon, and the rules most owners have read about are dormant. The older ones that bite may carry a twelve-month refund exposure.
A club where one saver’s balance passes £120, or last year’s turnover passed £1,000,000, loses the small-business exclusion and picks up costs nobody planned for.
Six months after the chef left, the shared password still works, and the register that would say who else holds it is missing.
Four or five third-party scripts nobody chose can read the card fields on a restaurant's own checkout page, and the exposure can run undetected before anything looks wrong.
Switching on a photo gallery or a guest message board can end a website's Online Safety Act exemption for the whole service, and the risk is one an owner must judge alone.
A printed table code will never be edited again, yet the address behind it can lapse, move or drift out of date, and the failure lands on a guest mid-service.
A departed booking supplier can still hold the whole guest list, and the restaurant that never instructed deletion carries the risk when a guest complains.
Two thousand addresses came off the wifi splash screen, and the Christmas send is booked. A network login is not negotiations for the sale, and the risk sits with the restaurant.
Heavy restaurant photographs are routinely blamed for the wrong metric, and a fortnight of work is spent against the wrong number. The report that settles it is field data.
A published security fix reaches a restaurant's live site only when somebody applies it, and by default that is nobody's job. The exposure lands on the restaurant either way.