Where your guests’ data lives, and who can read it.
Written for the person at your hotel who signs off a new supplier: what is built today, what is not yet, and where to send your questionnaire.
Where does a guest’s message go?
It is stored in Frankfurt, in the part of our database that belongs to your hotel. To answer it, Sarah’s AI providers process its text as well.
Our servers and database run with DigitalOcean in Frankfurt, Germany, inside the EU.
Row-level security, enforced by the database itself, keeps every hotel’s records apart, so hotels never see one another’s data. Wizorks’ own operations staff and our scheduled jobs work across hotels; the changes our staff make are recorded in our own activity log.
The dashboard, the guest portal and the chat window reach our servers over connections encrypted with TLS.
Taken every night, encrypted with AES-256, kept in the EU away from the production server, and restored on a schedule as a test. Each nightly backup is deleted after 45 days at most.
Your team can sign in with a passkey, and sees only what its role allows.
Each person signs in with a passkey (a face or a fingerprint, on their own device) or with a password.
Three roles come built in, and you can write your own, area by area: who may view, create, edit or delete.
Changes your team makes are written to your hotel’s activity log, each with the person who made it and the minute it was made. No application role can edit or remove a line.
Each channel key is held for your hotel alone and can be changed in a minute. Sarah never sees one.
Erasing a guest takes 30 days, and we name what stays behind.
Your team handles every guest right from one screen in the dashboard. This is what happens after someone presses delete.
- Every right on one screenA copy of everything held on a guest (a PDF in English, French or Arabic, or JSON), a corrected name, restricted processing or deletion, and each action written to the activity log.
- The 30 days after deleteFrom the moment your team presses delete, nobody can edit the guest, and nothing Wizorks or your team starts is sent to them; if the guest writes in, Sarah can still reply. Their name stays visible to your team until the 30 days are up; then their personal data is erased.
- Bookings and paymentsThey stay for your accounts, with the guest’s name removed.
- Your PMSThe booking in your PMS keeps the guest’s name and contact details. Wizorks cannot erase them there; that is for your team to do.
- Messages already deliveredCopies already on your team’s Telegram and in the guest’s own WhatsApp stay where they are.
- Automation logsThey keep message text for up to 14 days after the guest’s last message.
- BackupsCopies inside our nightly backups are gone within about 45 days of the erasure, as those backups are deleted.
- The audit trailIt is kept for 13 months, with the guest’s personal data taken out.
- Passport and ID scansThey erase themselves a set number of days after check-out; you choose between 30 and 365.
- Phone-call recordingsRecordings of calls are kept by our voice provider, and the purge does not remove them yet.
The questions your IT lead will ask us.
Do you hold SOC 2 or ISO 27001?
No. Wizorks holds no security certification; this page describes what is built instead.
Can our team sign in with single sign-on (SSO)?
No. Your team signs in with a passkey or a password.
Is there a status page?
No, and we publish no uptime figure. If Sarah goes quiet, write to [email protected].
Can we send you our security questionnaire?
Yes. Send it to [email protected] and one of the two founders fills it in, with the answers this page gives.
How do we report a security problem?
Write to [email protected]. Our security.txt file names the same address.
Does wizorks.com track its visitors?
No. This website runs no analytics and no session recording, and sets no advertising cookie. Its one cookie remembers the language you chose.
Where are your data processing agreement and list of providers?
The agreement is available on request from [email protected]. Our legal page names our main providers, next to our privacy policy, our terms and our accessibility statement.
Watch it answer a real enquiry from your property.
Thirty minutes on a call, with your own channels and rates on the screen, and no contract at the end of it.
- PMS Live
- 3
- Live channels
- 4
- Days to go live
- 2