Security and Compliance

Keep your guest and property data secure

Protect sensitive information with enterprise-grade security and privacy features. With Mews, safeguarding your property and guest's trust is built into every part of the platform.

Book a demo

Highlights

Simplify access
Centralize user management with SSO + SCIM and onboard new users in under 30 seconds. No extra software or complicated setup required.
Get peace-of-mind
Trust in our 99.97% uptime, 24/7 monitoring, disaster recovery and adherence to global standards like ISO 27001, SOC 2, PCI DSS, GDPR, and NF525.
Stay secure
Protect staff accounts with passkeys, 2FA, trusted devices and device-level approvals. Reduce password fatigue and avoid shared login risks.
Grow with confidence
Mews security covers every property, location and user role, and is included in all of our packages.

User Access

Passkeys
Enable logins with biometrics or PINs on a phone or hardware key. Setup takes less than 30 seconds per user. Free and available to all Mews users as standard.
SCIM user provisioning and deprovisioning
Grant or revoke access automatically when staff start or leave. Increase onboarding and offboarding security and boost consistency across all properties.
Single Sign On (SSO)
Say goodbye to passwords on sticky notes. Give your staff members a secure way to log in to all authorized tools using one set of credentials you control.
Two-factor authentication
2FA provides an added layer of protection against unauthorized access to sensitive information and data breaches from hackers.

Platform security you can trust

Built on Microsoft Azure
Along with the security guarantees and SLAs from Microsoft and utilization of their multi-geography data centers, having a cloud-based (and native) platform minimizes the surface exposed to potential attacks. If an attack were to occur, automatic and continuous data backup allow for rapid restoration.
Continuous security testing
To bolster system security, parts of our system continuously undergo penetration testing by a third party, looking for risks or weaknesses in the security, before they can be hacked. Additionally, we have established a Bug Bounty Program to leverage a community of ethical hackers for continual testing and disclosures. We also go through audits, certifications, due diligence processes and pen tests.
Automatic updates
Stay protected against emerging threats with regular automatic updates and patches to the platform.
99.9% uptime
The Mews PMS SLA guarantees 99.9% uptime, with a 12-month average of 99.97%.

Compliance and certifications

To give you and your guests peace of mind, Mews meets industry standards and best practices in safeguarding sensitive data – we are GDPR, ISO27001, NF525, PCI DSS and SOC 2 Type 2 compliant. Our policies and processes are designed to meet the stringent standards of security and privacy certifications, prioritizing your privacy and data security at every step.

Payments data, protected

Tokenization
Guest payment details are securely tokenized and stored, so properties never see unencrypted card data. This enables seamless repeat payments, reduces PCI DSS compliance scope, and enables one-click payments without exposing sensitive card data.
Point-to-Point Encryption (P2PE)
Cardholder information is encrypted directly at the Mews Terminal card reader and only decrypted securely on the Mews system. This ensures properties never access unencrypted card data, keeping payments safe at every step.
PCI DSS
Mews is fully certified under the Payment Card Industry Data Security Standard (PCI DSS). This rigorous compliance helps properties prevent fraud, build guest trust, and ensures account data is handled securely.
Payment Services Directive 2 (PSD2)
Mews Payments follows PSD2 regulations, including Strong Customer Authentication (SCA), to verify that customers are who they claim to be. This protects guest accounts and reduces the risk of fraudulent transactions.

Disaster recovery

Local high availability cluster
Two identical replicas of the database are stored so that we can retrieve the second one in the case of an incident.
Point in time restore
If needed, we’re able to restore a complete database to a particular point in time – even up to 35 days back.
Daily snapshots
Every day, we take a snapshot of the primary database using the point-in-time restore capability to another backup server.

Giving guests control

Guests can manage their personal data, request profile deletion and select which data can be shared with the property.

A family on holiday diving into a swimming pool.

Trusted by over 12,500 properties, all over the world

Meet our customers

Learn more about security and compliance at Mews

Article

Product

Why two-factor authentication (2FA) is a must-have for hospitality security

Read Article

The state of hospitality security

Guest loyalty and trust are already a struggle, and the current state of security (or insecurity) adds to the challenge.

7313
3
4191
1
%
Of hospitality organizations reported a data breach
$
1894
4.
9484
4
M
Global average cost of a data  breach 2023
$
1901
1.
4327
7
5926
6
M
Average savings from security AI and automations

Does Mews provide information security training for staff?

All staff undergo regular security and compliance training and optional technical events throughout the year to maximize security skills and awareness.

Is your security posture information publicly available?

It is – visit the Mews Trust Center to learn about our security posture (including compliance, infrastructure and data privacy) and Mews Status for our transparent, proactive uptime monitoring.

Do you maintain an up-to-date register of all your IT devices?

Yes, we do – it's part of our IT asset management process.

Why is secure user management critical for hospitality businesses?

Verizon reports that 74% of all data breaches involve the “human element”, meaning human errors, privilege misuse, use of stolen credentials or social engineering.

Because hospitality businesses collect and process sensitive customer data, including names, addresses, email addresses, phone numbers and credit card information, they are a common target of cyberattacks.

To mitigate the security risks of the human error, Mews offers advanced user management features to protect your guest and property data, including:

Two-factor authentication (2FA),
Single Sign On (SSO),
SCIM user provisioning and deprovisioning.

What is Single Sign On?

Single sign-on (SSO) is an authentication scheme that allows users to log in with a single set of credentials and access multiple related, yet independent, software systems without re-entering authentication factors.

What is SCIM User Provisioning?

SCIM User Provisioning is the process of creating and removing user accounts, ensuring efficient onboarding and offboarding procedures which is critical to good security practices. Because access is granted on role level, SCIM User Provisioning helps limit overprivileged users so they have just the right amount of access to perform their jobs.

Security and Compliance

Keep your guest and property data secure

Highlights

Simplify access

Get peace-of-mind

Stay secure

Grow with confidence

User Access

Passkeys

SCIM user provisioning and deprovisioning

Single Sign On (SSO)

Two-factor authentication

Platform security you can trust

Built on Microsoft Azure

Continuous security testing

Automatic updates

99.9% uptime

Compliance and certifications

Payments data, protected

Tokenization

Point-to-Point Encryption (P2PE)

PCI DSS

Payment Services Directive 2 (PSD2)

Disaster recovery

Local high availability cluster

Point in time restore

Daily snapshots

Giving guests control

Trusted by over 12,500 properties, all over the world

Learn more about security and compliance at Mews

Why two-factor authentication (2FA) is a must-have for hospitality security

Why cybersecurity belongs on every hotelier’s radar

How is technology improving security in the hotel industry?

The state of hospitality security

Guest loyalty and trust are already a struggle, and the current state of security (or insecurity) adds to the challenge.

Does Mews provide information security training for staff?

Is your security posture information publicly available?

Do you maintain an up-to-date register of all your IT devices?

Why is secure user management critical for hospitality businesses?

What is Single Sign On?

What is SCIM User Provisioning?

Ready for impact?

Trusted by over 12,500 properties, all over the world

Learn more about security and compliance at Mews

Why two-factor authentication (2FA) is a must-have for hospitality security

Why cybersecurity belongs on every hotelier’s radar

How is technology improving security in the hotel industry?

The state of hospitality security

Guest loyalty and trust are already a struggle, and the current state of security (or insecurity) adds to the challenge.

Does Mews provide information security training for staff?

Is your security posture information publicly available?

Do you maintain an up-to-date register of all your IT devices?

Why is secure user management critical for hospitality businesses?

What is Single Sign On?

What is SCIM User Provisioning?

Ready for impact?