AI governance for hotel groups

Every AI tool your hotels run, and the rules it must meet

Guest chatbots, passport scanners, pricing engines and camera analytics now run across your hotels. See what each one must meet in every market, and give owners and auditors the evidence that it does.

Front office and reservationsCheck-in and reservations tools, checked against each market’s rules.

Guest chatbots, AI voice agents and passport scan and face check-in on one register, each with an owner and a next step
Every foreign guest reported to Immigration through APOA, at check-in and check-out, at each Indonesian hotel
Face check-in checked against privacy law: consent, an impact assessment and another way to check in
Smart Check-In for hotels in Abu Dhabi, with identity checks through ICP

Revenue and distributionRoom rates that meet each market’s price rules.

Dynamic room pricing checked against the price rules where you sell
In Australia, the total price as a single figure today, and from 1 July 2027 every per-booking charge shown beside the base price
The total price, mandatory fees included, for stays in the United States, and all-in prices in California
Honest prices and tariffs in Indonesia, and a notice when a rate is personalised for a guest in the EU

Sales and marketingCampaigns and review replies that meet consent and disclosure rules.

Review replies and guest marketing content on your register, each with an owner
Marketing messages in Australia sent with consent, a named sender and an unsubscribe honoured within 5 business days
Telling guests when they are talking to a bot, where the law asks for it
The AI apps your teams already use, found through Microsoft 365 and a private staff link

Security and guest dataCameras and guest data handled as each market requires.

CCTV video analytics checked against the camera rules where each hotel sits
In Indonesia from 16 January 2027, cameras in public areas kept to their purpose, never used to identify people, with a sign and a named contact
In New South Wales, written notice to staff 14 days before workplace cameras start, with cameras visible and signs at each entrance
Data security and breach notice for every tool that holds guest data, including where your AI vendors send it

Your hotel teamsA person in every hiring decision, and training for every team.

AI screening of seasonal applicants, with a person in every hiring decision
In Indonesia, a way for applicants to object to decisions made by automated processing alone, with an alternative from 16 January 2027
In Australia, automated decisions named in your privacy policy from 10 December 2026
A written AI policy and staff training through the free PSP AI Quickstart

The rules for passport scan and face check-in at a hotel in Bali: foreign guest reporting through APOA, the right to object to automated decisions, and the rules starting on 16 January 2027, each with its official source

Up and running at every hotel

Add each hotel and its AI tools, see what each market requires, and share a report your owners can rely on.

Set up your first hotel

Its address sets the national, state and city rules it is checked against. Then add its AI tools: pick them from common tools, describe your own, or let Microsoft 365 and your staff link find them.

See what each requires

The rules for each hotel’s location, with each official source and the date new rules start.

Ready for 16 January 2027: three of a hotel’s AI tools to get ready for Indonesia’s new rules, each with its next step

Act and share

Follow your next steps and share a versioned report for each hotel with owners, management companies and auditors.

The hotel’s report, version 1, with its check page link, Copy link, Share on LinkedIn and the mark for your website

Your head office and every hotel, on one screen

Each hotel is checked against the rules where it sits, and your head office sees every hotel, in every market, at once.

Head office.

Your group-wide tools, from central reservations to revenue management, checked against the rules where your head office sits and in each market where your group does business.

Every hotel.

Each hotel’s own national, state and city rules, from Bali to Denver, with an owner and next steps for every tool.

One view.

Every hotel’s risk, next deadline and report in one place, for owners, management companies and auditors.

All hotels for a sample hotel group with its head office in Paris: six hotels in Paris, Bali, Singapore, Sydney, Abu Dhabi and Denver, each with its risk, its next deadline and its market

One arrival, one clear answer

Add passport scan and face check-in at a hotel in Bali, and this is what you see.

The risk level in each market.

See how each market’s rules class the tool, from minimal to high risk.

The rule, the duty and its source.

Each duty is linked to the official text and dated the day it was checked.

Your next steps.

A short list your front office can act on today, kept current as laws change.

Passport scan and face check-inScans passports and matches guests’ faces at check-in · A hotel in Bali, Indonesia

IndonesiaHigh riskIn force

UU 6/2011 on Immigration and Immigration’s APOA notice: report each foreign guest in APOA at check-in, with a photo of the passport page, and record the check-out. UU 27/2022 on Personal Data Protection, Art. 10: guests may object to decisions made by automated processing alone, and the hotel must be able to receive and act on the objection.

Official source ↗ · Checked 2 November 2026

IndonesiaHigh riskNew rules from 16 January 2027

PP 33/2026, Arts. 120 and 121: before high-risk processing starts, such as biometric data, new technology or automated decisions with a significant effect, complete and document a data protection impact assessment. Arts. 93 to 96: handle objections to automated decisions, explain the technology, and on an accepted objection offer an alternative with a person involved.

Official source ↗ · Checked 2 November 2026

Your next steps

Report each foreign guest in APOA at check-in, and record the check-out.

Give guests a clear way to object to an automated check-in decision and reach a person.

Before 16 January 2027, complete and file a data protection impact assessment for face matching.

The rules your hotels run on

Data protection, consumer and immigration rules apply in every market. Choose a region to see three that shape AI at your hotels, each linked to its official source and kept up to date.

2reports to Immigration for each foreign guest in Indonesia, at check-in and check-out

Up to 2%of annual revenue or income, Indonesia’s top administrative fine under its data protection law, for each kind of violation

Up to 10%of annual turnover in Singapore, or S$1 million if higher, for a breach of the PDPA

Readiness checks for every AI tool, drawn from:NIST AI RMF ↗ISO/IEC 42001 Annex A ↗

Priced per hotel, by its rooms

Each hotel gets its own register and report, priced by the rooms it runs.