Trust and security
Hospitality runs on trust. So we say exactly where we stand.
thatKorner was founded by a hotel-group CISO and built to pass the vendor security review he used to run. This page states what is in place today, what is in progress, and the date each remaining item is due.
| Item | Status | Detail |
|---|---|---|
| ISO 27001 | In progress | Implementation under way. Stage 2 audit planned for Q4 2026. We do not claim certification until the certificate is issued. |
| SOC 2 Type II | Scheduled | Scheduled for Q1 2027. Not yet attested. |
| Data protection law | In place | Processing designed for UAE PDPL, GDPR and India's DPDP Act 2023. A data processing agreement is signed before any data is processed. |
| Data residency | In place | Hosted on AWS in the UAE region for Gulf customers and in the Mumbai region for customers in India. |
| Tenant isolation | In place | Each operator's data is stored separately, encrypted in transit and at rest, and never pooled with another operator's. |
| Availability | Contractual | 99.9% uptime commitment in enterprise agreements. |
| Patent | Pending | Patent application filed. Not yet granted. |
Where the AI may speak, and where it may not
Language is generated. Facts are looked up.
The most important security decision in an AI product is what the model is not allowed to decide. In thatKorner, anything that can harm a guest or mislead a finance director is kept away from it.
Allergens
Answered from a matrix your kitchen signs, dish by dish. The model cannot override it. Where the matrix has no entry, the answer is a refusal and a person is called.
Numbers
The model plans the question. A deterministic compiler writes the query, and the figure is computed from your data. The plan behind each answer can be inspected.
Guest preferences
Chosen from a fixed list and saved with consent. There is no free-text field in which a remark about a guest could be stored.
Conversation
Recommendations, dish stories and pairing language are generated, and grounded in your own menu and your chef's notes.
What happens to a request
Five steps, each one logged.
- AuthenticateEvery request is tied to a signed-in user and to one operator's workspace.
- EncryptData is encrypted on its way to us and where it is stored.
- ProcessThe request runs inside that operator's scope and cannot read another's data.
- RecordWho did what, and when, is written to an audit log the operator can review.
- ForgetA guest's request to be forgotten removes their stored preferences.
Access and accountability
Your team sees what the job needs. Nothing more.
Permissions follow the role. A server sees a guest's allergies. A manager sees spend. A director sees the estate. Changes to menus, prices and permissions are recorded against the person who made them.
Role-based access
Set per outlet and per role, with sensitive fields withheld from devices that should not hold them.
Audit log
A record of who changed what, and when, across menus, prices, staff and settings.
Your data stays yours
It is exportable, deletable on request, and never pooled with another operator's for any purpose.
Read before write
In the first phase of an integration we read from your point-of-sale and write nothing back to it.
Documents
Read them before you sign.
Policies and agreements
Privacy notice · Terms of service · Cookie policy · Data processing agreement
Reporting a security concern
Write to contact@thatkorner.com with "Security" in the subject line. We acknowledge every report and tell you what we did about it.
Vendor security reviews
We complete security questionnaires for hotel groups directly and provide our current control documentation under a non-disclosure agreement.
Book a demo
Send us your security questionnaire.
We answer vendor security reviews directly, with the person who designed the controls on the call. Tell us your process and your deadline.
Life happens in the corner.
The corner table is the best seat in the house and the furthest from service. thatKorner was built so that no guest sitting there is ever forgotten, and no dish on the menu goes unexamined.