Aerial view of a hospitality asset under analysis

Security & Trust

Trust is a product feature, not a page.

This page describes controls that are visible in the product today, maintained by FABS Operating Systems. It is not an independent audit or a certification.

Organisation isolation

Every property belongs to exactly one organisation. Users only reach data their organisation and assigned property roles permit.

Authenticated access only

There is no anonymous access to operating data. Every user authenticates, and access is enforced at the database layer, not just in the interface.

Separated operating modes

Demonstration, sandbox and live data can never mix. Demonstration data is visibly badged wherever it appears.

Provenance on every figure

Each number declares whether it is live, imported, estimated or manually entered, and when it was last refreshed.

Append-only decision record

Decisions and directives are never silently rewritten. History is retained for ownership and diligence.

Read-oriented integrations

FABS connects to a class of system — PMS, POS, accounting, payroll — to read operating telemetry. It is not a system of record for guest data.

Cross-property learning: the boundary

Knowledge crosses properties; data never does. When FABS learns that an approach improved a result, what travels is the method, the directional effect and the cohort type. No guest data, no financial detail, no identities and no people data leave your organisation.

What we do not claim

We make no SOC 2, ISO, PCI, HIPAA or GDPR certification claims. Where we have design targets rather than completed attestations, we will say so directly. If your organisation requires a formal security review, we will work through your questionnaire with written answers rather than badges.

Shared responsibility: FABS is responsible for the platform's access controls and data handling. Your organisation remains responsible for user provisioning, credential hygiene, the accuracy of manually entered data, and the systems FABS reads from.

See it run against a real operating day.

A 45-minute executive demonstration, led by the founder — not a product tour.

Request a demonstration