Security
How we keep your hotel's data safe
A plain summary of how Ultra Guest isolates, protects and handles your hotel's and your guests' data. The Data Processing Agreement is the contractual statement of these measures.
Every hotel is kept apart
- Each hotel is a separate tenant on its own web address.
- Every request is checked against the hotel of the signed-in session; a mismatch is refused as not found.
- Access is worked out again in the database on every request, so a missing permission returns nothing.
- Ultra Guest runs on its own servers, database and sign-in service, separate from every other Ultra product.
Encryption
- All traffic is encrypted in transit, and personal data is encrypted at rest.
- Your integration and gateway credentials are stored encrypted and are never shown again after you save them.
- Ultra Guest never stores full card numbers. Card details are typed on the payment provider's page.
Access control and sign-in
- Each staff member sees only the screens their role allows.
- Ultra's own platform staff sign in with a second factor from an authenticator app.
- Guests sign in with a one-time link or code, so there are no guest passwords to leak.
Audit trail
- Security-relevant actions are written to an append-only audit trail.
- Money moves through a double-entry ledger, so every payment, refund and commission can be traced.
Hosting and where data lives
- The platform, its email and its AI run on Amazon Web Services in the United States (us-east-1).
- The database is backed up continuously and can be restored to a recent point in time.
- Transfers outside your country are covered by the safeguards described in the Data Processing Agreement.
Egypt's data protection law and the GDPR
- Your hotel controls its guests' data; we process it on your behalf under a Data Processing Agreement.
- Guest consent is recorded, and guests can ask to see or erase their data.
- We publish our list of sub-processors and notify your hotel of a personal-data breach within 72 hours.
- We do not claim any certification. The trust center states exactly what we do and do not claim.
See it on your property
Tell us about your hotel and we'll set up a tailored demo and pilot. We review every request personally.