SECURITY & COMPLIANCE
Insurance certificates, licenses and staff records are sensitive. ResortAIQ protects them at every layer — and proves it with an audit trail.
Every request passes through each layer before a single record is returned.
Invite-only accounts
No public sign-ups. Every user is invited by an owner.
Role-based access
Owner and manager roles decide what each person can do.
Property-level isolation
Row-level rules in the database on every table — a manager can only ever read their parks.
Encryption
TLS for every connection; data encrypted at rest.
Backups & audit log
Automatic backups and a logged record of every alert sent.
Hosted on managed Postgres (Supabase) with automatic patching and daily backups.
Server-side keys never reach the browser. Sensitive actions run in secured server functions.
Alerts are sent from an authenticated domain (SPF and DKIM) so they land and can’t be spoofed.
Uploaded files sit in private storage, accessible only to authorized users of that property.
Every expiry alert is logged with recipient and time — proof for insurers and inspectors.
HTTPS everywhere, strict security headers and bot protection on every form.
We welcome responsible disclosure. Email us with details and steps to reproduce. We’ll acknowledge within two business days and keep you updated until it’s fixed.
REPORT A SECURITY ISSUEIndependent security certification is on our roadmap. Enterprise customers can request our security questionnaire responses.
ADMIT ONE · FOUNDING PARK PASS
Pilot free. Then 30% off for 2 years.
Limited to 20 parks. Shape the product with your feedback and keep 30% off any plan for 24 months after launch.
SPOTS
20