Security
Your guests' identities and your money, protected by design.
A hotel hands Manaaki two things it cannot afford to lose: guest identity documents and the financial record. Here is what protects them, in plain language.
Guest ID documents are encrypted at rest
Aadhaar, passport and other document numbers are stored as ciphertext only. Screens show the last four digits. Revealing a full number needs owner or admin rights and is recorded. Scanned images are stored encrypted and decrypted only to serve an authorised request.
Money is an append-only ledger
Bills, payments, refunds, charges to room and folio settlements are immutable events. Nothing is edited after the fact; corrections are credit and debit notes with an actor and a reason. Balances are derived from the events, and the day book links every total to its documents.
Permissions are per action, not per screen
Over a hundred fine-grained permissions across roles. Some actions are owner-only by design and can be delegated deliberately, with the delegation itself on the record. Every void, discount, cash movement, rate change and room move carries who did it.
Sign-in without shared passwords
The Hub signs in with a one-time code or a personal PIN; phones are provisioned as named devices. Staff sign in as themselves, so the audit trail means something.
Every financial decision is made on the server
Availability, billing, settlement and night audit are decided on the server, never on a device. A room cannot be sold twice and a bill or folio cannot be settled twice.
Report a concern
Found something? Write to support@manaaki.in with the subject "Security". We read every report and reply to the person who sent it.
Where your data lives
Manaaki is cloud-hosted: one platform, one database per deployment, with every property's data separated by tenant on every query. Phones keep a working copy of the restaurant data they need for service; that copy syncs to the server and is removed when a device is deprovisioned.
Your data is yours
Your bills, folios, guests and reports belong to your business. You can take your data with you in every commercial state — including grace and suspension; that is an invariant of the platform, not a courtesy. We do not sell or share property data with anyone.
What we do not claim
We do not publish a certification we do not hold. As independent audits are completed, they will be listed here with dates.
Questions about security?
Ask them in the demo. We would rather answer before you sign than after.
14-day free trial · no card needed