Security and privacy, built in
Your guests’ data deserves serious care. Encryption, access control and privacy are built into Maabed, not something you configure later.
How we protect your data
The controls that keep your property and your guests safe, running quietly in the background.
Encryption everywhere
Data is encrypted in transit (TLS) and at rest, including backups.
GDPR-ready
Data-processing agreements, guest data exports and right-to-erasure handled by design.
PCI DSS
Card data is tokenised and never touches your servers or ours in the clear.
SSO & 2-factor
Single sign-on and two-factor authentication keep staff accounts locked down.
Backups & recovery
Automated, geographically-separate backups with a tested recovery plan.
99.9% uptime
A resilient, monitored infrastructure with a public status page.
Documentation for your team
Everything your IT or security reviewer needs to sign off, ready to share.
Security overview
A written summary of our controls, hosting and sub-processors.
DPA & sub-processors
Standard data-processing agreement and an up-to-date sub-processor list.
Penetration testing
Regular third-party testing, with summaries available under NDA.