Security – Resify

Last updated: March 2026

Trust is the foundation of the hospitality business. At Resify, we treat the security of your platform and your guests' data with the utmost seriousness. Our infrastructure is built using industry-leading security standards and practices to ensure your booking engine is resilient, reliable, and secure.

1. Infrastructure & Hosting

Your direct booking website is hosted on world-class, enterprise-grade cloud infrastructure.

High Availability: Our platforms are distributed across multiple availability zones to ensure maximum uptime and mitigate against single points of failure.
DDoS Protection: We employ advanced web application firewalls (WAF) and DDoS mitigation strategies to automatically block malicious traffic.
Routine Backups: Database and system configurations are automatically backed up daily to prevent data loss.

2. Data Encryption

We ensure that data is protected both in transit and at rest.

In Transit: All communication between your guests' browsers and Resify servers is encrypted using standard 256-bit SSL/TLS encryption. Look for the padlock icon in the browser address bar on all Resify-powered properties.
At Rest: Sensitive data stored in our databases is encrypted at rest using AES-256 block-level storage encryption.

3. Payment Security & PCI Compliance

We do not store or process full credit card numbers on our servers.

Stripe Integration: All card payments are securely handled via our integration with Stripe, a certified Level 1 PCI Service Provider (the most stringent level of certification available in the payments industry).
Tokenization: Payment data is tokenized upon entry, meaning Resify servers only ever handle secure payment tokens, drastically reducing your compliance burden.

4. Application Security

Our application development lifecycle embeds security at every stage.

Vulnerability Scanning: We routinely perform automated vulnerability scans on our codebase and dependencies.
Access Control: We enforce strict role-based access control (RBAC). Resify employees only have access to the data necessary to perform their specific job functions, and access is logged and audited.
Authentication: Administrative access to the Resify system requires robust authentication, including mandatory Multi-Factor Authentication (MFA) for our internal team.

5. Compliance & Privacy

We align our security practices with global privacy standards, including the GDPR. We ensure that our role as a data processor is carried out securely, guaranteeing the confidentiality and integrity of guest information.

6. Reporting Security Issues

We welcome feedback from the security research community. If you believe you have found a security vulnerability in Resify, please contact us immediately at security@resify.com. We ask that you give us a reasonable timeframe to investigate and patch the issue before disclosing it publicly.