One hotel cannot see another
Every reservation, guest and invoice carries the hotel it belongs to, and every query is filtered by it at the database layer rather than by each screen remembering to.
Least privilege, per hotel
Roles are held per hotel, so the same account can manage one property and only clean at another. Two-factor is enforced, not offered, on administrator accounts.
An activity log on the record itself
Bookings, rooms, guests, invoices, companies and accounts each keep a log of who changed what and when, readable next to the record rather than in a separate tool.
Card details never reach us
Payments run through the provider's own hosted checkout. Card numbers are never sent to, processed by or stored on our servers.
European by default
The company, the team and the hosting are in Europe. Ask us for the current hosting details in writing and we will put them in the agreement.
You are the controller
Your guests' data is yours. We process it on your instruction, under a data processing agreement, and you can have all of it back at any time.