What we have, and what we do not have yet.

Read-only

The connection is read-only.

Hoteleak reads from your PMS over a private connection. It has no way to write, and we built it that way on purpose.

What is never read

Some columns we never read at all.

Of a card we read the last four digits and nothing more. Full card numbers, CVV, national IDs and bank data are excluded at the source. They never arrive.

Masking before AI

Personal data is masked before any AI sees it.

Names and contact details are replaced before a request leaves for an AI provider. The provider never learns who the guest is.

Where it runs

It runs in a private environment.

Your PMS is reached over a private connection, never from the open internet. Processing runs in a private cloud environment, not on a shared public service.

Have and working toward

We are working toward formal certification.

We do not have it yet, and we will not put a badge on this page until we do. Ask us where we are and we will tell you.