Security

Security you can explain to your data protection officer.

ISO/IEC 27001 and BSI C5: RD030 follows ISO/IEC 27001 and BSI C5 in its setup and operation. No certification is in place.
Platform developed and operated in Germany: The RD030 platform is developed and operated in Germany.
Encrypted credentials: Approved data access and imported files are processed securely; connections use TLS.
Roles per hotel and group: Permissions are set per hotel, region or group. Users only see what they are cleared for.
Audit log: Every sign-in, query and change is logged with person and time.
Passkeys: Sign in with passkeys instead of passwords, optionally through your company account.
Data processing agreement: A data processing agreement under Art. 28 GDPR is available on request.
AI assistant: planned: An assistant for questions about your data. Planned.
Emails, files and role permissions: We process emails, attachments and files under a data processing agreement, with permissions by role and hotel. Assisted naming, sorting, checking and monitoring is planned.
Work and control layer: No. Your PMS, RMS and other systems stay in place. RD030 is the shared working layer above them: it makes data, knowledge, responsibilities and processes visible, documented and controllable.