Tenant isolation
Each organisation’s data is logically separated. Tenant filtering is applied to database queries automatically and verified by automated tests.
Security and data
Your financial data, protected by your rules.
Budgets, payroll and cash are among a hotel’s most sensitive data. In DRM Budget, access, scope and change rules are not a layer added later; they are the foundation of the product.
Access and control
Scope-based permissions
Users see only the properties and departments they are authorised for. View, edit, approve and export permissions are defined separately.
Two-factor sign-in
Users can enable two-factor sign-in with an authenticator app; recovery codes are supported.
Encrypted connections
The application is served over HTTPS only, with TLS 1.2 and TLS 1.3.
Audit trail
Every saved change records who made it, when, and which value it replaced. Input from the Excel add-in also leaves a receipt and an audit record.
Approval routes and period locks
Budgets and revisions follow defined approval routes. Once a period is locked, it cannot be changed from web, mobile or Excel.
Mobile session security
The mobile view uses the same identity and permission rules as the desktop. When a session ends, the on-device cache is cleared, and properties a user cannot see never reach their notifications.
Conflict protection in Excel
Every cell sent from Excel is compared with the value it was read with. If someone else has changed that cell, the submission is rejected rather than silently overwritten.
DRM Gateway
Data transfer from hotel systems
DRM Gateway is a Windows service that runs on your hotel server and moves PMS, accounting and inventory data into DRM Budget.
- It only opens outbound HTTPS connections; no inbound firewall ports and no VPN are required.
- Database credentials stay on the gateway machine, encrypted with Windows data protection; the cloud only knows the connection’s name.
- Every submission is signed; timestamps and one-time nonces reject replayed requests.
- The gateway reads only a read-only view written by your IT team. The PMS data contract contains no guest name or identity fields.
- Nothing is written until every part of a load has arrived and passed validation. Unmapped or rejected records are shown on screen.
- Raw integration data is deleted after 30 days.
Where is the data stored?
Data is stored on servers hosted in Türkiye. We share our backup, access and retention policies in writing before any contract. Details of personal data processing are set out in the KVKK disclosure.
KVKK disclosureDoes your IT team have questions?
Send us your security questionnaires and technical questions, and we will arrange a separate technical session with your IT and legal teams.
iletisim@drmbudget.comSee how it works in your hotel
Let us walk you through it in 30 minutes — on your department structure, your chart of accounts and your numbers. Not a canned demo: your scenario.