Security & compliance

Software that records payments carries the trust of a whole hotel. Here is, without detour, what Sonnette does and what it does not cover.

Hosting in France

Each hotel's application and databases are hosted with a provider established in France. Each hotel has its own isolated environment.

Backups

Regular encrypted backups are performed, including a copy stored off the main hosting site, with tested restores.

Encryption

Data is encrypted in transit (HTTPS/TLS) and at rest (databases, files, archives).

Audit log

Every sensitive operation (invoicing, payment, closing, settings change) is logged and exportable per hotel.

Tax chain

Invoicing and payments follow a chain built to withstand an audit: unalterability, security, retention and archiving of data, with daily, monthly and annual closings.

Compliance certificate (France)

For hotels located in France, Sonnette issues an individual certificate matching the tax administration's model (article 286-I-3° bis of the French General Tax Code), per major version of the software's tax scope, downloadable from your account.

Outside France: what Sonnette does not cover

Sonnette is open to any country, in euros, with a multilingual interface. Hosting in France, security and data reversibility hold everywhere. Compliance with local till regulations does not: each country has its own, and Sonnette does not cover them today.

Local till systems not covered by Sonnette
CountryLocal system
GermanyTSE system (KassenSichV)
BelgiumGKS-certified cash register (food service)
ItalyRegistratore telematico (RT)

If your hotel is located in one of these countries, your own local till obligation remains entirely your responsibility: Sonnette issues no certificate or certification for these systems.

A security or compliance question?

Write to us, we answer plainly, with no sales jargon. — [email protected]