Security
How we approach security across the Muxow website and platform
Our Approach to Security
At Muxow, we take the security of our website, our platform, and the information you share with us seriously. Muxow is hotel operations software used by hotels, hotel groups, chains, and management companies, and it handles sensitive operational data. We implement reasonable technical and organizational measures designed to protect that information.
Role-Based Access and Permissions
Access within the Muxow platform is governed by role-based access controls. Hotels assign roles and permissions to their authorized users so that staff see and act on the information relevant to their responsibilities. Permission controls help hotels limit access to sensitive operational records.
Hotel-Level Data Separation
The platform is designed to separate hotel data by property or account, so that operational records are intended to be available only to authorized users of that hotel. For management companies and groups that oversee multiple properties, portfolio access controls are designed to limit visibility to authorized properties and users based on the permissions configured for each user.
Authentication and Sessions
We use secure authentication and session handling to help ensure that only authorized users can access an account. Where applicable, requests are validated on the server, and access is checked against each user's assigned permissions.
Activity Logs and Protected Records
Operational records created in Muxow are stored on secure cloud infrastructure, and the platform maintains activity logs of relevant actions to support accountability and troubleshooting. These safeguards help protect the integrity of hotel operational data.
Encryption in Transit
Connections to our website and platform are encrypted using HTTPS (TLS). This helps protect data transmitted between your browser and Muxow from interception.
Access Controls
We limit access to information submitted through our website to authorized personnel who need it to respond to your inquiries or perform their job functions. We follow the principle of least privilege, granting only the minimum access necessary.
Infrastructure Security
Our website and platform are hosted on reputable cloud infrastructure providers that maintain their own security programs. We select vendors who demonstrate a commitment to security best practices. You can review the providers we rely on in our Subprocessors page.
Monitoring and Safeguards
We monitor our website for potential security issues and maintain operational safeguards to detect and respond to incidents. We regularly review our practices to identify areas for improvement.
Responsible Disclosure
If you discover a potential security vulnerability on our website, we appreciate your help in disclosing it to us responsibly. Please email us at security@muxow.com with details of the issue. We will investigate and respond as quickly as possible.
Important Note
No method of electronic transmission or storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security. We encourage you to take your own precautions when sharing information online.
Questions?
If you have questions about our security practices, please contact us at security@muxow.com.