Security is a feature
Your guests' data is a responsibility. Here's how we protect it.
Data isolation
Every restaurant is an isolated tenant: access checks on every request, persistence-level filters and blocked writes outside its own space.
Access and identity
Central sign-in based on OAuth 2.0 and OpenID Connect, revocable sessions, brute-force protection and granular role-based permissions.
Data in transit and at rest
HTTPS encryption, secure cookies isolated per application, tokens never exposed to the browser in management apps.
Traceability
Every booking's history records who did what and when.
Responsible AI
AI assistants act only through authorised tools, with human approval for sensitive actions.
Privacy
Consent, limited retention, data export and deletion under the GDPR.