Tenant isolation
One business’s records are not opened to another business. Database access policies back up application-level scoping.
Trust starts with data boundaries.
Guesthetic treats different businesses and their properties as distinct permission scopes. Access is evaluated in the context of each task.
Discuss your security requirements ↗Property and record visibility
Headquarters and property roles, together with record ownership, determine access. Staff do not see another property’s customer records by default.
Human oversight
AI suggestions do not change customer records without human acceptance; QR-linked WhatsApp does not allow autonomous AI sends.
Data responsibility
Channels connect through the business’s own accounts. Sensitive clinical information and transfers require their own permissions and legal review.