Security & compliance

Aurelian has been engineered to keep your business running securely, reliably and with minimal disruption.

• Real-time data replication across three geographically separate data centres for continuous redundancy and high availability.

• Cloud infrastructure is built on resilient, redundant architecture to maximise service availability.

• Native desktop applications connect securely to Aurelian's cloud platform, providing fast performance and helping staff continue working during temporary internet interruptions.

• Encrypted communications protect data between Aurelian and the cloud.

• Local data caching helps staff continue working during temporary internet slowdowns or outages.

• Individual user accounts with configurable permission levels help ensure staff only access the information they need.

Proven reliability

The engineering decisions behind Aurelian deliver dependable operation for accommodation providers who rely on their reservation system every day.

100% cloud service availability over the past 10 years.*

Aurelian has been designed to minimise your PCI compliance responsibilities by keeping sensitive payment card information separate from your everyday reservation operations.

• Aurelian does not process card payments or act as a payment gateway. Payments are handled securely by trusted PCI DSS compliant providers such as Windcave and Stripe.

• Full payment card details are encrypted and stored securely in the cloud—they are not stored in the local PC cache.

• The local cache retains only limited card reference information, such as the last four digits of the card and its expiry date, allowing staff to identify the correct card without exposing sensitive payment data.

• Reservation and operational information is securely cached locally so your property can continue operating during temporary internet outages, with changes automatically synchronised once connectivity returns.

• By keeping sensitive payment information out of day-to-day operations, Aurelian helps reduce the scope of PCI compliance for your property.

Aurelian has been designed to help accommodation providers meet their data protection responsibilities while retaining the information required for legitimate business purposes.

• Guest data retention periods can be configured so personal information is retained only for as long as your business requires.

• Guest information can also be removed on demand while preserving invoices and financial records needed for accounting and auditing.

• Personal information can be managed independently of operational and financial records, helping you meet privacy obligations without compromising essential business records.

• Individual user accounts and permission levels help ensure staff only access the guest information they need.