Security
Your hotel's data, protected
A hotel holds guests' names, passport numbers and payments. We treat that with care. Here is exactly what the program does.
Encrypted on your PC
The database is encrypted with AES-256 (SQLCipher). The key is random for each PC and sealed by Windows, so a copied file cannot be opened elsewhere.
Backups you control
A daily encrypted copy, an encrypted cloud copy, and password-protected USB backups. Restoring replaces nothing until you confirm, and the current data is kept first.
Signed updates
Every new version is signed. The program refuses any update whose signature does not match, so nobody can push a fake version to your PC.
Each person has their own sign-in
Names and passwords for the Admin, Staff ID and PIN for staff. Wrong tries are counted and locked. Screens lock themselves when idle.
Permissions
The Admin chooses what each role may do. Giving a discount, changing a price, voiding a bill line or deleting something can each be limited.
An audit log that can't be quietly edited
Important actions are written to a log in a chain, so a changed or deleted entry is detected.
Phones are approved one by one
The Admin pairs a phone by scanning a code on the PC, and approves staff phones. A phone can be removed at any time. Phones are protected by the phone's own fingerprint or lock.
Private guest links
Guest pages open only from a long secret link that expires, show only that guest's own information, and never reveal whether another link exists. ID photos are sealed in the guest's browser and only the hotel's PC can open them.
Your own payment account
Card payments go through your own PayHere account. The program never sees or stores card numbers.
Hardened program
The desktop program is locked down so it cannot be turned into a general tool, and it only runs its own sealed code.
Found something you think is a security problem? Please tell us first on 077 385 0235 or through the contact form. We will respond promptly and thank you for helping.