Tenant and property scoping
Operational records are associated with the correct organization and property. Application services enforce scope rather than relying on user-selected filters alone.
SECURITY & RELIABILITY
Operational software needs operational discipline.
LodgeMind is built around controlled access, correct property scope, separated services, recoverable deployments, and verifiable infrastructure.
Discuss Security RequirementsCORE CONTROLS
Security starts with architecture and operating practice.
Role-based access
Users receive access according to role, property membership, and administrative responsibility. Privileged control-center functions remain separate from hotel operations.
Separated platform surfaces
Sales, demo, and control-center services run as distinct applications and processes with independent routes and operational boundaries.
Auditability
Status changes, assignments, workflow events, deployment activity, and administrative actions can be recorded for operational review.
Backup and recovery
Platform operations include snapshot, database backup, restore, verification, and rollback procedures designed for repeatable execution.
Health and diagnostics
Application health endpoints, process management, reverse-proxy checks, and deployment verification support reliable operations.
INFRASTRUCTURE MODEL
Self-hosted application services behind a controlled reverse proxy.
LodgeMind services are designed for Linux, Node.js, PostgreSQL, process supervision, and NGINX. TLS termination, request controls, application health checks, deployment backups, and rollback are part of the operating model.
Security requirements vary by customer, deployment model, integration scope, and regulatory obligations. Specific controls are documented during technical discovery.
1TLS / NGINX reverse proxy
2Application services
3Authentication and authorization
4Property-scoped service layer
5PostgreSQL data layer
6Backup, health, and recovery operations
Responsible security disclosure
Report suspected vulnerabilities privately to security@lodgemind.com. Include enough information to reproduce and assess the issue. Do not access, modify, or retain customer data beyond what is necessary to demonstrate the vulnerability.
Need a technical architecture review?
We can review tenancy, access, deployment, backup, recovery, and integration requirements with your technical team.