Security and data

Current capabilities. Current limits.

A concise view of what Kept implements today.

Property isolation

Each property runs in its own instance and database.

Per-person access

Accounts, roles and surface access are assigned to individual users.

Limited data scope

Kept does not require guest names, reservation data or payment-card data for the core workflow.

Not implemented today

No inflated claims.

01

Database encryption at rest

Not implemented at the application database layer.

02

Single sign-on

No SAML or OAuth sign-in today.

03

Two-factor authentication

Not implemented today.

04

Point-in-time recovery

Recovery is based on scheduled backups rather than an arbitrary recovery timestamp.

Operational record

Independent verification.

Kept's audit chain and RFC 3161 anchors are designed so the record can be checked without relying on the dashboard itself.