Tillwire Read the guide
Features

Everything in the box. And what is next.

Checked against the code on main on 21 October 2026. Nothing here is a promise unless it says “Coming”.

46on main
6off by default, a setting turns them on
5coming
Show

Catalogue

Products, pictures and the rules around them

  • On main: Products with variants of up to 3 options, unique SKUs, archive in place of delete, and old addresses kept as permanent redirects.

  • On main: A category tree, products in many categories, breadcrumbs, related products, cross-sells and upsells.

  • On main: Custom product fields, also usable as search filters and collection rules.

  • On main: Image upload with the rotation fixed, metadata removed, WebP copies and responsive sizes; a media library.

  • On main: Product review before the shop shows a product: checks per part, held changes side by side, retire with a successor.

  • On main: Picture versions with review, and a picture per variant.

  • On main: Enquiry-only products and categories: no price, an enquiry form.

  • Off by default: AI drafts of product text through a provider port: only allowed facts go out, with a cost cap; nothing is sent without a key.

    Off by default
  • Off by default: AVIF image copies.

    Off by default

Checkout and payments

The part that makes the money

  • On main: Guest checkout always, no passwords, stock held while the buyer pays, and a total shown before every charge.

  • On main: The path from a product to the cart, checkout and the gateway works without JavaScript.

  • On main: Card gateways with a hosted payment page, signed notifications and refunds; keys stored encrypted; a test or live switch per gateway.

  • On main: Each gateway declares what it can do; /admin shows only what the gateway supports.

  • On main: Bank transfer: the buyer sees the bank details and the reference; staff record the payment; an unpaid order is cancelled after the store’s days.

  • Off by default: Cash on delivery, only with a courier that collects cash, with an optional fee that the buyer sees before confirming.

    Off by default
  • Coming: Saved cards on a real gateway, and subscriptions on it. Subscriptions run today with the test gateway only.

    Coming

Pricing and promotions

Offers without plug-ins

  • On main: Percent off, amount off and free delivery, with conditions on total, products, customer roles and dates.

  • On main: Coupons with total and per-email limits; sale prices and compare-at prices.

  • On main: Fixed combos and a build-your-own box with a discount.

  • On main: VAT by tax class and destination; nothing is shown when the store is not VAT-registered.

  • On main: Gift cards: sale and issue with a ledger, and redeem at checkout; a card can pay part of an order and the gateway charges the rest.

  • Coming: A setting for promotion stacking.

    Coming

Shipping and couriers

From the shelf to the door

  • On main: Shipping zones by country, province or postal-code range, with flat or weight-band rates, as the fallback.

  • On main: Live courier rates at checkout, with a time limit, a circuit breaker and a cache.

  • On main: One courier port with declared capabilities: rates, pickup points and lockers, booking, labels, tracking, cancel.

  • On main: Outside courier connectors over HTTP, proved with engine courier certify.

  • On main: Packing into the store’s own boxes; dispatch rules and an expected delivery date.

  • Off by default: Address auto-complete, called by the engine so the key never reaches the browser, with a daily limit.

    Off by default

Orders and stock

Every change kept as an event

  • On main: Order states built from events: waiting for payment, paid, packed, shipped, delivered, cancelled, refunded.

  • On main: Full and part refunds; tax invoices and credit notes as stored PDFs with serial numbers.

  • On main: A quote desk that asks each chosen courier for a door price, and keeps the quote.

  • On main: Corporate orders: clients with credit terms and limits, orders the shop enters, a pro forma, deposit and balance orders.

  • On main: Stock by location with a movement ledger, stock-takes, transfers, receipts, reorder levels and a stock report.

  • On main: Digital products with signed download links and limits.

  • Coming: Order edit.

    Coming

Customers

Accounts without passwords

  • On main: Sign-in by an emailed link or a 6-digit code.

  • On main: Account pages: addresses, orders with parcel state, reorder, data export and erasure, marketing choices.

  • On main: Back-in-stock alerts with double opt-in; reviews approved by the owner.

Mail

Order mail and marketing in one place

  • On main: Order mail with a queue, retries, DKIM signing, a suppression list, and bounce and complaint handling.

  • On main: Marketing consent with a ledger of the exact words shown, topics and one-click unsubscribe.

  • On main: Contacts, segments, scheduled mailings, A/B subject lines and reports per link.

  • Off by default: Automatic flows: welcome, abandoned cart, abandoned checkout, post-purchase and review request, with a hold-out group.

    Off by default
  • Coming: Win-back and sunset flows.

    Coming

Back office and API

One set of operations for people and code

  • On main: A full /admin back office: orders, catalogue, stock, marketing, mail and store settings.

  • On main: A staff team: roles, rights per screen (none, see, change) and per act, and a refusal page that names the missing right.

  • On main: One API over the same operations, with scoped tokens, rate limits, idempotency keys and an OpenAPI 3.1 file.

  • On main: Signed outbound webhooks with retries, a delivery log, replay and secret rotation.

  • Coming: A generated reference page for every operation, and a written rule for breaking API changes.

    Coming

Operations and security

Safe by default

  • On main: One binary, one container image, any host with a disk, a port, environment variables and an S3-compatible bucket.

  • On main: Backups without a pause, restore at start, health checks and a weekly restore drill.

  • On main: A Content-Security-Policy by hashes only, cross-origin request protection and per-IP rate limits.

  • On main: Secrets only from the environment or sealed in the database, with key rotation, and removed from logs.

  • On main: No outside call inside a database write, and no outside call made twice by a retried job.

  • Off by default: Edge cache purge on catalogue changes.

    Off by default

Source: the engine’s feature record, FEATURES.md, on main on 21 October 2026. Some features on main are not yet on the live demo store.