Security

Your data sits inside the world's most secure cloud.

Grevon is built entirely on Google Cloud Platform - the same infrastructure that protects Google Search, Gmail, and YouTube. World-class security isn't a feature we added. It came with the foundation.

Google Cloud
Powered by Google Cloud Platform

Google invests more in cybersecurity than almost any organisation on earth - billions of dollars, thousands of security engineers, and decades of experience protecting the world's most targeted infrastructure. When you use Grevon, that protection extends to your property data.

How we protect you

Security built into every layer

From the moment your data enters Grevon to the moment it reaches your team, it's protected at every step - automatically.

Encrypted everywhere, always

All data is encrypted in transit and at rest using AES-256 - the same standard used by banks and governments worldwide. No one can read your data without the right keys, and those keys are managed by Google's own hardware security modules.

Strict access controls with traceability

Only the people who need to see your data can. Grevon uses Google's Identity & Access Management (IAM) to enforce least-privilege access - meaning every user, system, and service only gets exactly the access they need, nothing more. Every access event is logged and traceable, giving you a full audit trail of who did what and when.

Real-time threat detection

Google's security systems monitor for threats 24/7 - automatically. Unusual login attempts, suspicious traffic patterns, and known attack signatures are caught and blocked before they can cause harm, without you ever knowing they happened.

DDoS protection, built in

Google Cloud absorbs and deflects distributed denial-of-service (DDoS) attacks at global scale - the kind that would take down most infrastructure. Your system stays up and available even when bad actors try to knock it offline.

Powered by Google Security

Enterprise-grade tools, running behind the scenes

The Google security products protecting Grevon are the same ones used by governments, banks, and Fortune 500 companies worldwide.

Google Threat Intelligence

Google tracks the threat landscape across the entire internet - billions of signals per day. Grevon benefits from this intelligence automatically, staying ahead of emerging attacks before they reach your data.

Learn more

Security Operations (SecOps)

Google's Security Operations platform provides continuous monitoring and rapid incident response. If anything unusual is detected in the environment, it's investigated and resolved in real time - not days later.

Learn more

Security Command Centre

A centralised view of security health, vulnerability findings, and compliance status across the entire Grevon infrastructure - giving our team and Google's the visibility to act fast on anything that needs attention.

Learn more
Compliance & certifications

Certified to the highest global standards

Google Cloud holds the most comprehensive set of compliance certifications in the industry. These aren't just badges - they're independently verified, third-party audited guarantees that the infrastructure your data lives on meets the strictest requirements in every major market.

PCI DSS

PCI DSS

Payment Card Industry standard for secure handling of cardholder data

GDPR

GDPR

Full compliance with EU and UK data protection regulations

HIPAA Compliant

HIPAA Eligible

Infrastructure eligible for handling protected health information

Google Cloud

Built on Google's world-class cloud infrastructure and security

Our commitments to you

How Grevon handles your data

The infrastructure is Google's. The responsibility is ours. Here's exactly what we commit to.

Your data is yours

We never sell, share, or monetise your guest data or property information. Full stop. It's used only to run the Grevon services you've subscribed to.

Data stays in your region

We configure data residency to keep your property and guest data within your chosen geographic region - whether that's Australia, Europe, the UK, or the US - so it stays subject to local laws.

You can leave anytime - with everything

If you ever decide Grevon isn't right for you, we provide a full data export in standard formats within 30 days of your request. No lock-in, no ransom fees.

We'll tell you if something goes wrong

In the unlikely event of a security incident affecting your data, we notify you promptly - well within the timeframes required by GDPR and other applicable laws.

Uptime you can count on

Google Cloud's global infrastructure is designed for 99.99% availability. Your booking agents, voice systems, and property data stay online - even during peak season, major events, or unexpected demand spikes.

A signed Data Processing Agreement

All Grevon customers receive a DPA that clearly defines how data is processed, who has access, and what your rights are. Fully GDPR-compliant and available on request.

Have a security question?

Our team is happy to walk you through how we protect your property's data, provide our DPA, or answer any compliance questions your IT or legal team might have.