roommaster Security Awareness

Online security in the hospitality industry is a shared responsibility. While roommaster operates on a secure, professionally managed platform, hotels play an essential role in protecting their systems by using only authorized access points and following secure login practices.

Cybercriminals may attempt to impersonate trusted hospitality technology providers by copying branding, logos, or website layouts. Awareness and verification are key to preventing unauthorized access and protecting your business.

How roommaster Protects Your Data

roommaster is built using security-by-design principles and operates on a hardened, enterprise-grade infrastructure designed specifically for the hospitality industry.

Identity & Access Security

• Centralized authentication and authorization system
• Role-based access control to ensure users only access what they are permitted to see
• Controlled system access based on assigned user roles

Platform & Infrastructure

• Encrypted data transmission
• Secure private cloud infrastructure hosted in professional data centers
• Hardened network perimeter with layered firewall protection
• Continuous monitoring and regular security updates

PCI-Related Security Principles

roommaster follows industry-aligned security principles related to payment processing.

• No storage of sensitive payment card data outside defined processes
• Clear separation of system components and access layers
• Infrastructure designed in line with common PCI security best practices

GDPR & Data Protection

roommaster processes personal data in accordance with applicable data protection regulations.

This includes:

• Access restrictions based on the principle of least privilege
• Technical and organizational measures to protect sensitive data
• Secure handling of guest and operational information
• Support for customers in maintaining GDPR-compliant processes

Common Online Security Threats for Hotels

Hotels are frequent targets for cybercrime due to the nature of guest data and financial transactions.

The most common threats include:

• Phishing emails impersonating trusted vendors
• Fake websites using official branding or similar domain names
• Unauthorized login pages designed to capture user credentials
• Requests to log in via unfamiliar or unofficial URLs

Important Security Notice

roommaster will never ask you to enter your login credentials on unofficial websites or unknown domains.

Always verify before logging in.

Be cautious if you encounter:

• Websites that look like roommaster but use different URLs
• Emails or messages requesting urgent login action
• Unexpected password reset or account access requests
• Login links shared through email, messaging apps, or social media

Authorized roommaster Login URLs

To protect your account and data, only enter your roommaster credentials on the following official roommaster login URLs:

• https://cloud.innquest.com
• https://iqwebbook.com
• https://app.innquest.com
• https://bookings.roommaster.com
• https://stayfull.innquest.com

These are the only authorized login access points for roommaster solutions.

Do not log in on any other websites, even if they appear similar or use roommaster branding.

If you are unsure whether a website or URL is authorized by roommaster, do not proceed.

What to Do If You Are Unsure or Notice Something Suspicious

If you encounter a website, email, or message that appears suspicious:

• Do not enter your username or password
• Do not click on login links from unknown sources
• Take note of the URL, sender, or message details
• Contact roommaster Support to verify before taking any action

Our support team can confirm whether a website, URL, or communication is legitimate.

Recommended Security Best Practices for Hotels

Authentication & Passwords

• Use strong, unique passwords
• Store passwords securely (password managers recommended)
• Never write down or visibly store login credentials

Operational Security

• Lock workstations when unattended
• Avoid logging in on shared or public devices
• Keep operating systems and browsers up to date
• Train staff regularly on security awareness

Account & Access Management

• Use individual user accounts instead of shared logins
• Assign access rights based on defined roles
• Deactivate accounts immediately when employees leave
• Regularly review and remove unused or inactive accounts

Our Recommendation

Effective online security for hotels is achieved through the combination of:

• Robust technology
• Clear internal processes
• Informed and vigilant users