Trust & Security
Enterprise security, out of the box
How we protect you
Six pillars of the HospiOS security model
Controls that are independently audited and always on — not a checkbox for a sales deck.
Encryption & isolation
Your data is encrypted everywhere and isolated from every other property.
- AES-256 at rest, TLS 1.3 in transit
- Per-property logical isolation
- Encrypted backups with point-in-time restore
Access control
Every user gets exactly the access they need — no more, no less.
- Granular role-based access across 20+ roles
- Two-factor authentication available
- Session and API-key management
Full audit trails
Every action is logged, attributable, and reviewable.
- Activity logs on data and configuration changes
- Login and session history
- Admin review dashboard
Reliability & uptime
Hospitality never sleeps, and neither does our platform.
- 99.99% uptime SLA on paid plans
- Automated failover across regions
- Planned maintenance outside peak hours
Data residency
Choose where your property's data lives.
- EU and US data residency options
- Local legal-entity processing where required
- Full export and deletion on request
Secure by design
Security is part of how we build, not an afterthought.
- Independent penetration tests
- Dependency and vulnerability scanning
- A responsible-disclosure program
Compliance
Certifications & commitments
Independent verification, so you can answer your procurement team in one email.
Audited controls for security, availability, processing integrity, confidentiality and privacy.
Information security management aligned with the international standard.
Processors and data-subject rights supported — you stay the controller of guest data.
Payment handling built on certified providers; card data never touches our servers.
Keep guest data in the EU for GDPR simplicity.
Four-nines availability on paid plans, with status transparency.
You stay in control of guest data
Your property is the controller of guest data; HospiOS is the processor acting on your instructions. That means export, correction and deletion on demand — plus full support when your guests exercise their data rights.
Security questionnaire?
Our team responds in under two business days.