HRS VAULT
Secure the way your business stays, works,
and pays
Built into the HRS operating system to protect traveler data, govern AI workflows, and reduce supplier-side exposure.
Status Quo
The risk just changed
AI-led attacks, loose credentials, and hotel-side exposure are now enterprise travel risks.
78%
surge in new attack vectors
4.5×
AI phishing more effective
82%
hotels hit by cyberattacks in 2025
Problem
Why travel security breaks today
PII travels too far
Data moves across booking, supplier, service, payment, and invoice systems.
Suppliers need less data
Hotels need fulfillment data, not full employee contact details.
AI needs governance
Automation scales only when IT and Legal can approve the data flow.
Payment needs protection
Virtual card and invoice flows need stronger controls.
Benefits
Make AI-powered travel enterprise-ready
Protect traveler data
PII is tokenized before it moves across the ecosystem.
Mask supplier exposure
Hotels receive HRS relay identities, not real employee contact details.
Govern AI inputs
Sensitive data is controlled before it enters Copilot workflows.
Verify every access
Zero Trust controls scope, verify, and log each session.
Secure pay & invoice
PCI DSS-aligned processing across virtual card and invoice flows.
HOW HRS VAULT WORKS
HRS Vault intercepts at the API boundary
AI Gateway
Detect PII before AI input
Tokenization & masking
Hotels receive HRS relay identities, not real employee contact details.
Zero Trust controls
Verify, scope, and log acces
Vault Pro
Customer-hosted keys
AUDIENCE ROUTES
Built for the buying center
Travel Management
Get AI approved faster
IT Security
Reduce attack surface
Legal / DPO
Control AI data use
.avif)
Finance
Secure pay-to-reclaim
Products
One operating system. Secured by Vault.
HRS connects two platforms – Copilot & Connect - into one operating model for lodging & meetings to manage the whole process from procurement to reclaim. In a single place. Engineered to integrate seamlessly with your tech stack. Designed with an intuitive interface.
Experience the power of AI to save time, money, emissions, and manual work.
FAQs
All your questions, answered.
What is HRS Vault?
HRS Vault is the enterprise trust layer built into the HRS platform. It protects travelers' identity, passport data, and personal information across the full booking ecosystem by intercepting PII at the platform boundary, tokenizing it, and passing only tokens and relay identities downstream. It is part of the platform, not an add-on product.
Is Vault a separate product I need to buy?
No. Vault Standard is part of the HRS platform for every customer. Vault Pro, where you host the vault in your own infrastructure with your own encryption keys, is available for organizations with sovereignty requirements. Your HRS account team can walk you through which Vault provisions apply to your environment.
What do hotels and downstream systems actually receive?
Tokenized booking references and HRS relay identities: a relay email address and an HRS hotline number that work for every operational purpose. Your employees' real names, contact details, and passport data stay encrypted in the Vault.
Could downstream systems train AI models on our travel data?
Only if they receive real data — and with Vault they never do. Personal data that was tokenized and masked before it reached a downstream system cannot enter any training dataset. There is nothing to train on.
Does Vault replace our security architecture?
No. Vault complements your security model. It makes the travel data layer transparent, governable, and auditable, so your security, legal, and Works Council stakeholders can sign off on the platform.