Security

Core controls

• Encryption — TLS in transit; encrypted storage at rest for sensitive fields.
• Access — Role-based staff accounts; hotel data isolated by property / organisation.
• Auditability — Append-oriented guest register events exportable for local police formats.
• Residency — Production guest data kept in India.

Verification rails

DigiLocker, Aadhaar offline QR, passport MRZ, and other ID checks are integrated to return verification outcomes — not indefinite copies of source documents. Liveness checks exist to reduce presentation fraud.

Operational security

• Least-privilege production access with logged administration
• Dependency and vulnerability monitoring on application services
• Incident response playbooks for availability and data events

Report a concern

Responsible disclosure: security@ezzycheck.in. For product questions, use Contact.