Hotel PMS security: how Innkeeper protects your property and guest data
Guest data is encrypted, backed up and visible only to the staff you allow, and it belongs to your property, not to us.
The demo keeps everything in your browser
The live demo on this site runs entirely in your browser. The 8-room demo inn, the bookings you create and the confirmation email you paste stay in the memory of your browser tab and disappear when you close it. Nothing you type in the demo is stored on our servers, and no account is needed to use it.
- No account needed for the demo
- Demo state stays in your browser tab
- Closing the tab clears it
Hotel data security: encryption in transit and at rest
Every connection between your browser and Innkeeper is encrypted, whether it comes from the front desk computer, a manager's laptop or a housekeeper's phone. Data is also encrypted at rest, in the database and in backups. Backups run automatically and are stored encrypted, so a property can be restored if something goes wrong. Staff do not need to manage any of this, and there is no server at the hotel to secure.
- Encrypted connections from every device
- Encryption at rest for data and backups
- Automatic backups, nothing to run at the property
Guest data protection: the data belongs to the property
The names, contact details, stays and invoices in Innkeeper are your property's records. We process them to run the service for you and for no other purpose. We do not sell guest data and do not contact your guests on our own behalf. You can export your data, and when you leave, you take it with you. On request we provide a data processing agreement (DPA) that sets out how guest data is processed on your behalf.
Staff access that matches the job
The most common data problem at a small hotel is not an attack but a shared password on a sticky note. Innkeeper gives each member of staff their own login. The Inn plan includes two staff logins. The Hotel plan includes up to ten, each with a role, so a housekeeper using the hotel housekeeping software sees rooms to clean and not guest payment details. The Boutique plan has unlimited staff logins with custom roles, and an audit log that records who changed which reservation, rate or invoice and when.
- Personal logins instead of a shared password
- Roles on Hotel, custom roles on Boutique
- Audit log on Boutique
Records you can rely on
Security also means records that stay correct. Reservations handled at the hotel front desk software and invoices issued with the hotel invoicing software stay attached to the same stay, so a change leaves a traceable record instead of a second, conflicting document.
Security for groups of properties
Groups with an IT contact get more on the Group plan: single sign-on through SAML, Google Workspace or Microsoft, an uptime SLA, a security review, a DPA and custom data retention. See the multi property hotel software page. To report a security concern, write to [email protected].
Hotel PMS security questions
Who owns the guest data in Innkeeper?
Your property does. We process guest data only to provide the service to you, and you can export it at any time.
Is guest data encrypted?
Yes. Data is encrypted in transit between every device and Innkeeper, and encrypted at rest, including backups.
Can I see which staff member changed a booking?
Yes, on the Boutique plan. Every change to a reservation, rate or invoice is logged with the name of the staff member and the time of the change.
Do you sign a data processing agreement?
Yes. A DPA is available on request. On the Group plan it is part of the package together with a security review and custom data retention.
Security features by plan
Inn
Monthly
$49
- Yearly
- $490
- Rooms
- up to 10 rooms
Hotel
Monthly
$149
- Yearly
- $1,490
- Rooms
- up to 30 rooms
Boutique
Monthly
$499
- Yearly
- $4,990
- Rooms
- up to 80 rooms
Roles, audit log and single sign-on by plan are listed on the hotel PMS pricing page.
Keep guest data safe and under your control
Create your account and give every member of staff their own login.