Security & trust

You trust us with your guests' identity documents and the details of every reservation. Here is how we protect them.

Encryption end to end

TLS 1.3 in transit, AES-256 at rest. Your data and your guests' data are encrypted at all times.

Frankfurt (Germany) infrastructure, ISO 27001 and SOC 2 Type II. No transfer outside the EU without standard contractual clauses.

CNDP declaration, up-to-date processing register, audited subprocessors, access and deletion rights honoured.

Every action on sensitive data (ID document, contract) is logged and kept for 12 months.

Encrypted backups every 24h, kept 30 days across 3 regions. RTO < 4h, RPO < 24h.

Annual pentest by an independent firm. Summary report available on request for paid accounts.

Found a flaw? Write to security@scalex.ma. Reply within 48 hours, bug bounty for critical vulnerabilities.