%20--%3e%3cdefs%3e%3cstyle%3e%20.st0%20{%20fill:%20%23b1d15b;%20}%20.st1%20{%20fill:%20%23f3f1eb;%20}%20%3c/style%3e%3c/defs%3e%3cpath%20class='st0'%20d='M223.1,0l-32.7,53.9c-4.1,6.7-11.5,11-19.5,11h-90.1c-8,0-15.6-4.3-19.7-11L28.6,0H0v251.5h28.6l32.5-53.5c4.1-6.9,11.7-11,19.7-11h90.1c8,0,15.4,4.1,19.5,11l32.7,53.5h28.4V0h-28.4ZM156.2,156.4h-60.9v-60.9h60.9v60.9Z'/%3e%3cg%3e%3cpath%20class='st1'%20d='M337.8,64.9h17.5v52.9h61.4v-52.9h17.3v122.2h-17.3v-54.6h-61.4v54.6h-17.5v-122.2Z'/%3e%3cpath%20class='st1'%20d='M498.7,188.3c-8.3,0-15.7-1.8-22.3-5.5-6.6-3.7-11.7-8.8-15.4-15.5-3.7-6.7-5.6-14.6-5.6-23.7s1.9-17.2,5.8-23.9c3.9-6.7,9.1-12,15.7-15.6,6.6-3.7,14.1-5.5,22.3-5.5s15.7,1.8,22.4,5.5,12,8.8,15.8,15.5c3.9,6.7,5.8,14.6,5.8,23.6s-1.9,17.2-5.8,23.9c-3.9,6.8-9.2,12-16,15.6-6.7,3.7-14.3,5.5-22.7,5.5ZM498.5,173.3c4.7,0,9-1.1,13.1-3.2,4.1-2.1,7.4-5.4,10-9.9,2.6-4.4,3.9-10.1,3.9-16.9s-1.3-12.3-3.8-16.7c-2.5-4.4-5.8-7.6-9.8-9.8-4.1-2.1-8.4-3.2-13.1-3.2s-8.8,1.1-12.6,3.2c-3.9,2.2-7.1,5.4-9.5,9.9-2.4,4.4-3.7,10.1-3.7,16.9s1.2,12.3,3.6,16.7c2.4,4.4,5.5,7.6,9.3,9.8,3.9,2.2,8,3.2,12.6,3.2Z'/%3e%3cpath%20class='st1'%20d='M565.9,99.8v-24.4h16.6v24.4h21.8v14.7h-21.8v42.9c0,5.3,1.1,9.1,3.2,11.3s4.9,3.5,8.2,3.8,6.8.2,10.4-.3v14.1c-4.8,1.1-9.5,1.4-14.1,1-4.6-.4-8.7-1.7-12.4-3.9-3.7-2.2-6.6-5.4-8.7-9.7s-3.2-9.7-3.2-16.3v-42.9h-12.6v-14.7h12.6Z'/%3e%3cpath%20class='st1'%20d='M660.5,188.3c-8.4,0-15.8-2-22.3-5.9s-11.5-9.3-15.2-16.1c-3.7-6.9-5.5-14.7-5.5-23.5s1.8-16.1,5.4-22.7c3.6-6.6,8.6-11.9,14.9-15.7,6.3-3.8,13.5-5.8,21.6-5.8s15.4,1.8,21.6,5.3c6.3,3.5,11.2,8.5,14.7,14.8,3.5,6.3,5.2,13.6,5.1,21.9,0,1.4,0,2.8-.2,4.3-.1,1.5-.3,3.1-.5,4.8h-64.6c.4,4.7,1.6,8.8,3.9,12.3,2.3,3.5,5.2,6.3,8.7,8.3,3.6,2,7.6,3,12.1,3s10.9-1.1,15.2-3.4c4.3-2.3,7.3-5.3,9.1-9.2l14.3,5.1c-3.5,7.1-8.6,12.6-15.3,16.6s-14.4,5.9-23.1,5.9ZM682.8,135.6c0-4.2-1-8-3.1-11.4-2.1-3.4-4.9-6-8.5-7.9-3.6-1.9-7.5-2.9-11.9-2.9s-7.6,1-10.9,2.9c-3.3,1.9-6.1,4.5-8.4,7.9-2.3,3.3-3.7,7.1-4.3,11.4h47.1Z'/%3e%3cpath%20class='st1'%20d='M720.9,61.4h16.4v125.7h-16.4V61.4Z'/%3e%3cpath%20class='st1'%20d='M818.3,188.3c-8.6,0-16.7-1.5-24.2-4.5-7.5-3-14-7.3-19.6-12.8-5.6-5.5-10-12.1-13.1-19.7-3.1-7.6-4.7-16-4.7-25.2s1.6-17.4,4.7-25c3.2-7.6,7.5-14.2,13.1-19.8,5.6-5.6,12.1-9.9,19.6-12.9,7.5-3,15.6-4.5,24.2-4.5s16.5,1.5,23.9,4.5c7.4,3,14,7.3,19.5,12.9,5.6,5.6,10,12.2,13.1,19.8,3.1,7.6,4.7,16,4.7,25s-1.6,17.6-4.7,25.2c-3.2,7.6-7.5,14.2-13.1,19.7-5.6,5.5-12.1,9.8-19.5,12.8-7.4,3-15.4,4.5-23.9,4.5ZM818.3,173.3c8.3,0,15.7-1.9,22.3-5.8,6.6-3.8,11.8-9.3,15.6-16.4,3.9-7.1,5.8-15.5,5.8-25.1s-1.9-18.2-5.8-25.2c-3.8-7-9.1-12.5-15.6-16.3-6.6-3.8-14-5.8-22.3-5.8s-15.9,1.9-22.5,5.8c-6.6,3.8-11.9,9.3-15.6,16.3-3.8,7-5.7,15.4-5.7,25.2s1.9,18,5.8,25.1c3.8,7.1,9.1,12.6,15.6,16.4,6.6,3.8,14,5.8,22.4,5.8Z'/%3e%3cpath%20class='st1'%20d='M910.6,154.8c.7,3.3,2.1,6.3,4.3,9.1,2.2,2.8,5.1,5.1,8.8,6.8,3.7,1.8,8.3,2.6,13.8,2.6,8.1,0,14.2-1.9,18.1-5.7,3.9-3.8,5.8-8.2,5.8-13.3s-1.2-7.7-3.6-10.4c-2.4-2.7-5.7-5.1-9.8-7-4.1-1.9-8.9-3.6-14.2-5.1-4.7-1.4-9.2-2.9-13.7-4.5-4.5-1.6-8.5-3.5-12.1-5.9-3.6-2.4-6.5-5.5-8.6-9.2-2.1-3.8-3.1-8.5-3.1-14.2s1.7-13.2,5.1-18.3c3.4-5.1,8.1-9,14.2-11.8,6.1-2.7,13.2-4.1,21.2-4.1s12.8,1,18.2,2.9c5.3,1.9,9.9,4.6,13.5,8.2,3.7,3.6,6.4,7.8,8.1,12.8l-15.9,5.8c-.7-2.6-2.2-5-4.4-7.3-2.2-2.3-5-4.1-8.4-5.5-3.4-1.4-7.2-2.1-11.4-2.1-4.3-.1-8.2.6-11.6,2-3.4,1.5-6.2,3.5-8.2,6.2-2,2.7-3.1,5.9-3.1,9.6s1.2,7.3,3.5,9.6c2.3,2.3,5.4,4.2,9.3,5.8,3.9,1.5,8.2,3,12.8,4.4,4.9,1.5,9.7,3.1,14.3,4.9,4.6,1.8,8.9,4,12.7,6.6,3.8,2.7,6.8,6,9.1,10,2.3,4,3.5,9.1,3.5,15.1s-1.5,12.5-4.6,17.8c-3,5.4-7.6,9.7-13.7,12.9-6.1,3.3-13.8,4.9-23,4.9s-14.4-1.2-20.4-3.5c-6-2.3-11-5.6-14.9-9.7-3.9-4.1-6.5-8.9-7.8-14.4l15.9-5.9Z'/%3e%3c/g%3e%3c/svg%3e)
Trust & security
The postureyour auditor expects.
HotelOS handles guest PII, payment tokens, payroll signals and the general ledger. Treat us like a finance system, because we are one.
This page is the single source of truth for our security posture, data architecture, and compliance status. We publish the same detail to procurement teams that we publish here — no hidden caveats, no certification asterisks.
Certifications & frameworks
Where we stand
on the paperwork that matters.
SOC 2
In progress
We are working with an independent auditor on Type I scoping. Type II observation will follow. We will publish each milestone here as it lands — no calendar promises while we are building the controls properly.
PCI DSS
Out-of-scope architecture
We do not store, process, or transmit cardholder data. Tokenisation runs through your existing PSP (Adyen, Stripe, Mews Payments, Worldpay) and tokens are referenced by handle only.
GDPR · APPI · PDPA
Standard Article 28 DPA
Standard contractual clauses, sub-processor list, and right-to-export endpoints available on request. Data Protection Officer at [email protected].
ISO 27001
Future scope
ISMS scope is being defined alongside SOC 2 work. ISO 27001 is on the longer-term roadmap; we will signal a target window once Type I lands.
Data architecture
How we hold
your operating data.
Hosting & residency
Per-tenant residency election at provisioning across US (Virginia), EU (Frankfurt), and APAC (Singapore). Stateful data, object storage and backups stay in the elected region. Edge compute is regionally pinned for residency-sensitive workloads. No cross-region transfer without your written instruction.
Encryption
AES-256 at rest, TLS 1.3 in transit. KMS-managed keys per tenant. BYOK on enterprise tier; HYOK on the roadmap for regulated groups.
Identity & access
SAML 2.0 and OIDC against Okta, Microsoft Entra and Google Workspace. SCIM provisioning. Role-based access scoped to property, brand, and folio. Break-glass with session recording and post-session review.
Audit trail
Append-only, cryptographically chained event log across every product surface. Exportable in CSV or Parquet for your auditor. 7-year default retention; configurable per jurisdiction.
Backup & resilience
Continuous WAL backup, point-in-time recovery, daily snapshots replicated to a second region. Targeted RTO of 4 hours, RPO of 5 minutes; we will publish measured numbers once the platform has lived through real production seasons.
Sub-processors
A current sub-processor list is available on request and will be published openly as the catalogue firms up. We commit to 30-day change notification on material additions, with no cross-jurisdiction transfer outside the published list without written consent.
Operating policies
How we behave
when something goes wrong.
Penetration testing
Scoping our first independent third-party penetration test now. Findings and remediation will be published here as the engagement completes.
Vulnerability disclosure
Coordinated disclosure policy in place — safe-harbour for researchers acting in good faith. Reach us at [email protected].
Bug bounty
A private bug-bounty programme is on the roadmap, opening alongside SOC 2 Type I. Public expansion follows once we have lived through it.
Breach notification
Commitment to notify within 72 hours of a confirmed material incident, with a written remediation plan inside 14 days. Codified in every customer DPA.
Cyber insurance
Cyber liability and professional indemnity coverage is available on customer request, sized to portfolio and procurement requirements. Summary shared under NDA.
Sub-processor controls
Sub-processors are security-reviewed before onboarding, with a documented exit plan for tier-one services. Annual review cadence as the catalogue grows.
Procurement is welcome
Hand us your security questionnaire.
We answer enterprise security questionnaires (CAIQ, SIG-Lite, custom) inside five business days. The trust pack — SOC 2 letter, DPA, sub-processor list, pen-test summary, insurance summary, BCP/DR plan — is available under NDA in one click.