Security and your data.

How HOSP stores, protects, and returns your records. The full terms and data processing addendum are on the Terms page.

Encrypted in transit, scoped to your organization

Data is encrypted in transit. Each customer’s data is logically separated by organization, with role based access controls on top.

Hosted in the United States

Google Cloud Platform for hosting and compute, MongoDB Atlas for the database, and Google Cloud Storage for files. All in the United States.

Your data comes back

On termination, HOSP returns or deletes your data within 30 days, at your choice, subject to any legally required retention.

Roles and permissions

Corporate, management, front of house, and back of house roles, set per location, with per user overrides.

Breach notification

If a personal data breach occurs, HOSP notifies you without undue delay, as set out in the data processing addendum.

Subprocessors, listed

OpenAI powers the AI assistant. SendGrid sends transactional email. Sentry and PostHog handle error monitoring and product analytics. The full list is in the DPA.

The software and the attorneys stay separate.

HOSP is software. BevLaw Group is a law division of Litson PLLC. On a HOSP + BevLaw Group plan, attorney communication happens in the incident thread, and your engagement letter sets the terms. Ask about privilege on the call and we will walk you through it.

Questions about your data?

Email support@hosp.team or book a call with our team.