Our hotel software system follows GDPR and PCI-compliance ready security and has in-built user management security. Moreover, access to the hosted server is limited and password policy to access the server is maintained. We backup the data in real-time on S3. The complete database is encrypted and secured.