Security

Our approach

Security is built into the platform from the ground up. We apply layered controls across the application, data, and infrastructure to protect your information.

Access control

We enforce least-privilege access throughout the product:

• Role-based access control for every sensitive action.
• Strict tenant isolation so each hostel's data stays separate.
• Session protection and secure authentication.

Data protection

Your data is protected in transit and at rest:

• Encrypted connections (HTTPS) for all traffic.
• Encrypted offline storage on the device for cached data.
• Content Security Policy, Trusted Types, and Subresource Integrity to harden the client.

Auditing & monitoring

Every sensitive action is recorded in a complete, exportable audit trail with configurable retention to support inspections and investigations.

Resilience & recovery

Scheduled backups and disaster-recovery tooling help ensure your data can be restored, with the offline-first design keeping you operational during outages.

Reporting a vulnerability

If you believe you've found a security issue, please contact us responsibly via our contact page so we can investigate and respond promptly.