The tools running your business hold owner financials, guest PII, and payment data. Your owners and guests trust you with their money. Your software should earn that same trust. Track is the property management platform for professionals. That means protecting your data is our top job.
Identity and Access
Track runs on Auth0, a dedicated identity platform built for scale. You get single sign-on across the Track suite, multi-factor security on every login, and automatic credential resets. The system tracks active sessions to block hijacked accounts before issues start. This includes SSO for multi-entity business operators as well. You won't need to log out and back in when switching profiles.
Protected Payments
Every transaction runs through real-time fraud checks with SEON.io. The platform uses device tracking, profile analysis, and machine learning. It stops account takeovers and fake identities before they cost you money.
Layered Infrastructure Defense
We protect your tools using AWS Web Application Firewall, Network Firewall, and strict security rules. Amazon GuardDuty gives you non-stop threat detection. SentinelOne adds real-time endpoint protection. We build on solid standards from NIST, CIS Controls, AWS Best Practices, and PCI DSS 4.0.1.
Data Protection Under Attack
Your data stays safe using TLS 1.2 and 1.3 encryption in transit. We use AES-256 at rest. Sensitive items like Owner Tax IDs get an extra layer of protection.
Built to Survive the Worst Day
You get a full disaster recovery system with data backed up every minute. A fast 4-hour recovery goal keeps your team running even if an entire cloud region goes offline.
Watched Around the Clock
A dedicated Security Operations Command team watches your tools 24/7. Daily log reviews and independent team penetration tests back up your system all year long.
Independently Certified
Track holds verified certifications on a regular renewal schedule. We maintain full compliance across PCI DSS 4.0.1, SOC 1 Type II, SOC 2 Type II, and CCPA.
Certifications renew, tests repeat, and monitoring never stops. Learn more here.
Interested in Track for your business? Contact us today.
Is Track Hospitality SOC 2 compliant?
Yes. Track holds completed SOC 2 Type II and SOC 1 Type II certifications. Independent auditors verify that our controls over security, availability, confidentiality, and financial reporting work effectively over sustained review periods.
Is Track PCI DSS compliant?
Yes. Track complies with PCI DSS 4.0.1 standards. This covers how cardholder data gets handled, processed, and stored across our entire platform.
Does Track comply with CCPA?
Yes. Track maintains full CCPA compliance. We honor the data privacy rights the California Consumer Privacy Act gives California residents.
How often do independent teams audit Track's certifications?
Track certifications renew on a regular schedule rather than sitting as a one-time achievement. Independent security teams conduct penetration testing, risk assessments, and policy reviews on that same continuous cycle.
How does Track encrypt customer data?
Track encrypts data in transit using TLS 1.2 and 1.3 with ECDHE. We protect data at rest with AES-256. Sensitive items like Owner Tax IDs get an additional encryption layer on top of standard protection.
Where does Track host its infrastructure?
Track runs on Amazon Web Services (AWS). AWS Web Application Firewall, AWS Network Firewall, and strict security groups guard the system to isolate traffic between services.
Does Track support single sign-on (SSO)?
Yes. Track runs on Auth0, an identity platform built for scale. You get SSO support via SAML 2.0 and OIDC-compatible identity providers like Microsoft Entra ID (Azure AD), Google Workspace, and Okta.
Does Track support SSO for multi-entity business operators (multi-tenant SSO)?
Yes. Track provides one login across every tenant you run. You won't need to log out and back in when your team moves between separate business entities.
Does Track's SSO connect to my other business software?
Track single sign-on covers authentication across the Track suite only. It doesn't extend to unrelated third-party software outside our system.
Is multi-factor authentication (MFA) required for Track logins?
Your identity provider enforces MFA on every SSO login. Track adds secure session-cookie controls and session origin tracking to detect and block hijacked accounts.
How does Track control internal employee access to customer data?
Internal access follows strict role-based controls. Employees get only the specific access required for their jobs. We review these permissions every quarter.
How does Track detect and respond to security threats?
A dedicated Security Operations Command team monitors events 24/7. A daily SIEM log analysis system and Amazon GuardDuty back up this team with continuous threat detection.
Does Track undergo third-party penetration testing?
Yes. Independent security firms run penetration tests multiple times a year. These tests span whitebox, greybox, network segmentation, and internal/external infrastructure checks.
What endpoint protection does Track use?
Track deploys SentinelOne across all endpoints. This system delivers real-time detection, prevention, and automated responses to stop malware and ransomware threats.
Does Track follow secure software development practices?
Yes. Our engineering team uses secure coding practices aligned with OWASP Top 10 standards. Multiple engineers review and test code changes before release, while automated tools scan for software vulnerabilities.
What happens if Track experiences a security incident?
Track maintains a dedicated incident response team with a structured, documented protocol for any suspected security event. Annual risk assessments reinforce this process.
What is Track's disaster recovery plan?
Track maintains a fully provisioned disaster recovery environment built to handle region-level outages. Customer data replicates to a separate region every minute, supporting a 1-hour recovery point goal and a 4-hour recovery time goal.
How does Track protect against payment fraud?
Track integrates SEON.io real-time fraud prevention into every payment transaction. The platform combines machine learning with device fingerprinting, IP tracking, and behavioral profiling to block suspicious activity before it completes.
Who do I contact with security questions about Track?
Reach out to your Track account representative, or send us a message directly at [email protected]. Our security team will follow up directly with your team.