Security
How we protect our travel platform, develop our service and handle security concerns.
Data & privacy
Our public website and Booked AI web application use HTTPS to protect browser connections in transit. Read our privacy policy for information about personal data.
Read our privacy policyAccount access
Booked AI uses authenticated sign-in and server-side role and company access controls. Contact us if you suspect unauthorised access. Never share passwords or verification codes.
Report an account concernSecurity reviews
Request security information for the Booked AI product your organisation is evaluating.
Request security informationDATA PROTECTION
Stored credentials
Supplier credentials stored in our connection vault are encrypted before saving, with encryption keys managed separately from the encrypted database records.
INFRASTRUCTURE & DEVELOPMENT
How we develop our service
We use separate production and staging deployment environments. Our development process includes automated tests, source and dependency security scans, and tracked fixes with verification before release.
Findings inform our remediation work; scanning does not guarantee that software is free of vulnerabilities.
REPORT A CONCERN
Report a security concern
Email [email protected]. Include the affected product and a brief description of the issue. We have designated a backup for urgent security-incident escalation.
Contact us to arrange a secure way to share sensitive information. Do not email passwords, verification codes or payment details.
Please avoid testing that could disrupt services, access another person’s data or create bookings, holds or payments.
SECURITY INFORMATION
Assurance and readiness
We are working towards SOC 2 and ISO 27001 readiness for Booked AI and its supporting operations. We do not claim SOC 2 attestation or ISO 27001 certification.
For a security review, email [email protected] with your documentation requirements.