Synthetic demo boundary
The sales demo uses synthetic data in a separate database. It has no live Hostaway credentials, integrations or external write capability.
Trust centre · security
Designed to keep the demo separate and controlled.
Security claims here describe implemented product controls, not a certification.
Controlled access
Demo sessions use signed, expiring access tokens. Production deployment requires HTTPS, secure cookies, HSTS and restricted host configuration.
Data minimisation
The funnel asks only for commercial contact and qualification details. It does not need guest records, payment cards or PMS credentials.
Operations
Backups, audit trails, dependency checks, tenant-isolation tests and release verification form part of the wider product controls. Independent assurance and penetration testing remain launch tasks.
Report a concern
Do not include secrets or personal data in an initial report. Send a concise description to security@shortstaycontrol.com.