Security

Separation between customers

• Every record belongs to exactly one workspace, and the database itself enforces that you can only read and write rows for workspaces you are an active member of.
• Those rules also verify that linked records (guests, packages, events, feedback) belong to the same workspace, so nothing can be attached across customer boundaries.
• Access control is applied in the database, not only in the application, so a mistake in the interface cannot expose another customer's data.

Sign-in and accounts

• Sign-in uses a one-time code sent to your work email. There are no passwords to guess, reuse or leak.
• Anonymous accounts are disabled, and administrator rights are held in a separate, server-checked roles table that cannot be changed from a browser.
• Sessions are validated on the server for every request that touches data.

Guest links and files

• Invitation, RSVP and feedback pages open through a unique, unguessable personal link that only returns that one guest's information.
• Tickets, documents and photos are kept in private storage and are only ever served through short-lived links.
• Guest pages are excluded from search engines, and every guest endpoint is rate limited per link and per source to block automated probing.

Transport, hosting and headers

• Data is hosted in the European Union and encrypted in transit (HTTPS with strict transport security) and at rest.
• Strict content security, framing, referrer and permissions policies are applied to every page.
• Background jobs authenticate with a dedicated secret, not with any key that reaches a browser.

Monitoring and data handling

• Internal activity logs record what happened without storing guest emails, phone numbers or dietary notes.
• Dependencies are scanned for known vulnerabilities, and the database is checked against automated security rules.
• Customers can export their data and permanently delete their workspace at any time, and can set automatic retention limits.

Reporting a vulnerability

If you believe you have found a security issue, please write to privacy@theguestoffice.com with the details. We will acknowledge your report and keep you updated until it is resolved. Please do not test against real guest data.

See also our privacy policy and subprocessors.