Security

Itoura is built for tour operators handling guest, staff, booking, and operational data. This page summarizes the launch security posture for pilots and early access.

Access control

The product is designed around organization-based access, role permissions, and scoped staff workflows.

Data protection

Itoura uses secure authentication, encrypted transport, audit-oriented records, and operational controls for guest and booking workflows.

GDPR readiness

Itoura includes or is preparing tools for data retention, export, deletion, and anonymization workflows for European operators.

Responsible disclosure

If you believe you have found a security issue, email hello@itoura.com with details so we can investigate.