Trust & Safety

Security at Sarucci

We take the security and privacy of your hotel's data seriously. Here's how we keep your information safe.

Cloud Infrastructure

All data is stored and processed on world-class cloud infrastructure provided by Google Cloud Platform (GCP) and Amazon Web Services (AWS). These providers offer best-in-class physical security, redundancy, and availability guarantees.

Google Cloud Platform

Amazon Web Services

Data Encryption & GDPR Compliance

All data is encrypted at rest and in transit using industry-standard AES-256 and TLS 1.3 protocols. Our database architecture is designed so that sensitive data is never stored in plaintext.

Sarucci is fully compliant with the General Data Protection Regulation (GDPR). We process personal data only for the purposes explicitly stated, provide data subject rights upon request, and maintain records of processing activities in accordance with GDPR Articles 13 and 30.

Standard Security Practices

✓Role-based access control (RBAC) — only authorised personnel can access production systems.

✓Regular security audits and penetration testing by independent third parties.

✓Automated vulnerability scanning on all code deployments.

✓Multi-factor authentication (MFA) enforced for all internal accounts.

✓Incident response plan with defined SLAs for breach notification.

✓Data minimisation — we collect only what is necessary to deliver the service.

AI Providers

Sarucci's agentic revenue intelligence systems are powered by leading AI providers. All AI API calls are made over encrypted connections and we do not share identifiable guest data with AI providers.

Anthropic Claude

OpenAI

Google Gemini

Have a security concern or question? Contact our team at [email protected]