Security & Administration guide

Hotel Data Security and Backups

Hotel data security built into the database: row-level isolation, an encrypted key vault, separate sessions per app and a backup before every change.

Your data is protected at every layer, from the database to the server it runs on.

In the database

Every property's data is walled off by a policy applied on each query, which the app itself cannot bypass.
Channel and payment gateway keys sit in a vault the application cannot read.
The few functions that work across accounts are named, and refuse anyone except the platform.

When you sign in

Your PMS, POS, CRM and central reservations each live on a separate host with a separate session, so logging into one does not log you into the others. Everything uses TLS on one certificate that renews itself.

On the server

fail2ban protects SSH, with bans that grow longer
Deploys use a key, never a password
The application listens only locally, behind nginx
Nothing executable runs on the static sites

Before any change goes live

The database is dumped and the backup kept next to the change's number. Every change, with its tests, is first tried in a transaction that is then undone, and only afterwards applied for real.

What the tests prove

Close to two hundred test files run and roll back. Several sign in as the application and try to read another hotel's data, open the vault or act as the platform, and the build fails if any of that works.

Other Security & Administration guides

One Database for Rooms, F&B, CRM and AccountsSingle-database hotel software gives you one guest, one folio and one ledger across every module, so the PMS and POS never need reconciling. Hotel ID Login and Data IsolationStaff sign in with a hotel ID, email and password, and database-level row security decides exactly which property's data each login can see. User Roles and Permissions Down to the ButtonHotel user roles and permissions for reception, housekeeping, back office and managers, with fine-grained rights per login enforced in the database. Multi-Property Management for Hotel GroupsMulti-property hotel software that keeps each hotel's day and rates separate while your group shares one guest list, one CRS and combined numbers. Support Access Only When You Allow ItOur support team cannot open your hotel's data unless you grant access for a set time, and every support visit is logged for you to review. Built-In Help Manual on Every ScreenA built-in hotel software help manual of 124 topics, one keypress away on any screen and filtered to your modules and each person's role. Clear Messages When the System Says NoEvery hotel software error message is a plain sentence your desk can act on, with a help page to match, and only money is refused outright. A Full Audit Trail of Every ChangeA hotel audit trail recording who changed what, when, from which login, IP address and device, readable by your hotel on one page. New Hotel Setup Wizard and Go-Live ChecklistA new hotel setup wizard that gets your property selling in an afternoon, with a readiness checklist and an onboarding board to track go-live. Module Subscriptions and Account BillingModule subscriptions are switched per account and take effect at once; screens, rights and help all follow, and a suspended account is locked out. Guest and Report Emails in Your Hotel's NameHotel email sending for confirmations, invoices, payment links and reports, from a verified domain in your name, with replies going to a real person.