HostOS
Book a demoStart free

Security

Isolation you can prove.

Your data — and your guests’ — is isolated by the database, encrypted at rest, and never sent to a model in the clear. These are the controls in place today.

Request security packView compliance
Tenant isolation Enforced by DB
Guest PII to a model Never
Secrets at rest Encrypted
Every action Audited

How your data flows

Every guest message follows one governed path.

PII is stripped before a model is involved, retrieval is isolated to your workspace, and the answer is composed only from your property’s facts and approved knowledge.

Guest message
A message arrives with personal details.
PII redacted
Names and numbers become tokens before any model sees them.
Tenant-isolated retrieval
Postgres RLS scopes the query to your workspace only.
Grounded compose
The answer is built only from your approved facts and knowledge.
Deliver & audit
No PII left your boundary; the decision is logged immutably.
Deny by default

Cross-tenant access is impossible even via raw SQL, a forged parameter, or a missing filter — and the test suite proves it on every change.

Governance

Auto-send is a gate — not a guess.

Every automatic reply clears the same gate: a trusted source, sufficient confidence, and a safe intent. Miss any one and HostOS escalates to you, with the reason attached.

Source. Answers come only from your approved facts and knowledge.

Confidence. Below threshold it never sends — it asks.

Intent. Refunds, policy and risk are held for your judgment.

Autonomy · the send decision
Source: No matching fact
Confidence: 0.31
Intent: Refund request
Verdict
Escalate to host
A policy call — held for your judgment.

Controls

What’s implemented today.

We list only controls that are in place — not a roadmap of intentions.

Tenant isolation
Postgres row-level security plus an application guard — no cross-tenant leak, even from a raw query. One host can never see another’s data.
Enforced
Encrypted secrets
Provider tokens and sensitive facts (door codes) are sealed with authenticated encryption — only an opaque reference touches a row. No card data ever reaches HostOS.
In place
PII-safe AI
Guest personal data is redacted before any model sees it. Knowledge grows from host-approved content — never by training a black box on your guests.
Enforced
Audit trail
Every AI decision and host action is logged with sources, confidence and a timestamp — and is reversible. Built for dispute defense and review.
In place
Secure connections
Providers connect via OAuth 2.0 with PKCE; webhooks are signature-verified before touching our systems; tokens refresh and revoke cleanly.
In place
Sessions & access
Argon2id password hashing, revocable server sessions, secure cookies, and least-privilege access derived from membership — with SSO for enterprise.
In place

For your security team

Need a security pack or a DPA?

Request security packView compliance