Skip to content
Español Book a demo Menu

Security and privacy

Who gets in, what they see and what gets logged

What the platform does today to protect access and data, told plainly.

  • Two-factor authentication

    A password plus a code from an authenticator app (TOTP). It can be required per role, and the database itself enforces it, not just the screen.

  • Per-role, per-section permissions

    Each role gets no access, view or edit, section by section. “View only” is enforced by the database too: hiding a button isn’t enough.

  • Per-property scope

    In an account with several properties, each person only gets into the ones you assign to them.

  • Each client isolated

    Each client’s data is kept separate at database level with row-level security (PostgreSQL RLS).

  • Activity log

    Payments, bookings, exports and other changes are logged with who and when, and the log can’t be edited or deleted.

  • Invoices that stay put

    Numbering is assigned by the server, with no gaps or duplicates, and an issued invoice can no longer be edited or deleted.

Your guests’ data

Small details that prevent big scares.

  • Pre-check-in is completed from a personal link, without the guest having to create an account
  • Payment receipts go to private storage, not to a public folder
  • Calendars exported to the portals carry no guest data
  • Your property’s website records who accepts or rejects cookies, with date and categories
  • Requests arriving through your website store the IP address only as a fingerprint, to curb abuse
  • You can delete a booking together with its guest registration
Roles and permissions matrix by section, with two-factor authentication required by role.
Roles and permissions

Your part

Security also depends on how it’s used: require two-factor authentication for the roles with the most permissions (out of the box only the super-administrator role requires it) and give each person only what they need. We set this up with you during implementation.

And this website. It uses no cookies, stores nothing in your browser and loads nothing from third parties: no Google fonts, no analytics. The cookie policy explains it.

Shall we look at your property?

Tell us how your property works and we’ll show you the platform with examples from your day-to-day. No commitment.

Book a demo

Or email us at info@anfitrio.es