Elyra, Inc. Trust Center

Continuously monitored

Last updated Apr 26, 2026

Security & Trust at Elyra

Protecting restaurant and guest data with enterprise-grade security

Elyra provides an AI-driven booking platform for restaurants, handling sensitive guest information including personal details and reservation data. We take the security and privacy of this data seriously. Our platform is built on encrypted infrastructure, role-based access controls, and continuous monitoring to ensure your data stays protected.

We are GDPR compliant and actively pursuing SOC 2 certification to meet the highest standards for data protection and operational security. This Trust Center provides transparency into our security posture, compliance status, and the subprocessors we work with. If you have questions or need to report a security concern, please reach out using the buttons below.

Report a vulnerability Privacy Policy

28

resources

6

subprocessors

Compliance

2

Independently audited and continuously evidenced against the standards our customers rely on.

Compliant

GDPR

General Data Protection Regulation (GDPR)

Valid through: Apr 26, 2027

In progress

SOC 2

AICPA Trust Service Principles Service Organization Controls (SOC)

Valid through: Apr 26, 2027

Resources

28

Policies, documentation, and reports that govern how we protect customer data.

Legal, Regulatory & Contractual Compliance Register

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Organizational Roles & Responsibilities

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Nonconformity & Corrective Action Procedure

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Management Review Procedure

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Internal Audit Policy & Procedure

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Statement of Applicability (SoA) Governance Framework

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Information Security Policy & Governance

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

ISMS Scope & Context

Version 2026.2 · Reviewed Apr 26, 2026 · yearly

Subprocessors

6

Third-party providers that process customer data on our behalf, and where they operate.

Resend

Software as a Service

OAuth app authorized by users

Anthropic

Software as a Service

Claude assistant platform by Anthropic

OpenAI

Software as a Service

AI platform and language model provider

Amazon Web Services

Other

Cloud infrastructure provider used for application hosting, storage, and computing services.

Stripe

Other

Payment processing and financial infrastructure platform used to handle online payments.

GitHub

Software as a Service

Code hosting platform

Questions about our security?

We're glad to help your security and procurement teams move quickly.

Contact us Report a vulnerability Privacy Policy