Enterprise-grade. Hospitality-ready.
withQ handles real guest data — reservation details, payment information, PII — for hotels and resorts on four continents. Security isn’t a feature. It’s the floor.
Audited and attested.
The frameworks below cover how we handle security, payments, and personal data — the table stakes for every hotel, resort, and travel brand we work with.
SOC 2 Type II
Independently audited controls for security, availability, and confidentiality. Annual SOC 2 Type II report available on request under NDA.
PCI DSS
Card numbers are tokenized through our payment processors, and full card numbers and security codes never persist in our application database. Annual PCI DSS attestation maintained.
GDPR
EU resident data is processed under our Data Processing Agreement, with rights requests handled by our team.
Want the full breakdown?
Our Trust Center has the policy library, sub-processor list, vulnerability disclosures, audit reports, and live status. It’s the source of truth for security and compliance documentation.
Visit Trust Center →Ready to put withQ on every line?
Talk to us about pilot programs, security reviews, and procurement.
Book a demo →