Trust & Security
Enterprise security, out of the box
How we protect you
Six pillars of the HospiOS security model
Controls that are independently audited and always on — not a checkbox for a sales deck.
Encryption & isolation
Your data is encrypted everywhere and isolated from every other property.
- AES-256 at rest, TLS 1.3 in transit
- Per-property logical isolation
- Encrypted backups with point-in-time restore
Access control
Every user gets exactly the access they need — no more, no less.
- Role-based access control across staff roles
- Two-factor authentication available
- Session and API-key management
Activity logging
Key actions are logged, reviewable, and attributable to a user.
- Activity logs on important changes
- Login and session history
- Admin review dashboard
Reliability & uptime
Hospitality never sleeps, and neither does our platform.
- High-availability cloud architecture
- Automated monitoring with status alerts
- Planned maintenance outside peak hours
Data residency
Choose where your property's data lives.
- EU and US data residency options
- Local legal-entity processing where required
- Full export and deletion on request
Secure by design
Security is part of how we build, not an afterthought.
- Continuous dependency and vulnerability scanning
- Security review before every release
- A channel to report security concerns
Trust
Security commitments & practices
Plain-language security practices you can share with your procurement team.
AES-256 at rest and TLS 1.3 in transit for all property data.
Fine-grained roles so every user only sees what they need.
You stay the controller of guest data; we act as your processor.
Choose EU or US data residency for your property's data.
Login and change logs so you can always review what happened.
Automated backups with point-in-time restore.
You stay in control of guest data
Your property is the controller of guest data; HospiOS is the processor acting on your instructions. That means export, correction and deletion on demand — plus support when your guests exercise their data rights.
Security questionnaire?
Our team responds in under two business days.