Security & Trust
Marriott, Hilton, IHG, Hyatt — the largest hospitality brands in the world trust Visiting Media with their immersive sales infrastructure. Here’s how we earn that trust.
Every Visiting Media API surface, including our hosted MCP server, ships read-only by default. Write access is explicit opt-in scoped per token. AI agents and integration partners can't mutate your asset library or property metadata unless your admin grants the scope.
Per Eric Sniff (CTO): your API keys are not logged on the wire, not echoed in our application logs, and not persisted in plaintext anywhere in our infrastructure. Tokens are hashed at rest and only the hash is referenced by our authorization layer.
Multi-property customers — management groups, ownership portfolios, brand portfolios — get strict per-property data isolation. A rep at property A can't see property B's assets without an explicit cross-property scope.
We actively scan for vulnerabilities, and we review our security against the OWASP and NIST standards. (Per Eric Sniff, CTO.)
We provide a current security questionnaire, SIG Lite responses, and a copy of our most recent audit report under NDA on request. Reach out to your Visiting Media account team or contact us directly.
Email SecurityFree 60-Second Hospitality Website & AI Search Audit
Enter any hotel, resort, or event venue URL to score its 0 to 100 Visual Quotient (VQ) across 3D/360° virtual tours, interactive floor plans, and AI search readiness (ChatGPT, Gemini, Perplexity).
Schedule a personalized demo to see how our AI-powered platform can accelerate your revenue.
