The guest is told, every time
Each call opens by saying this is an AI front desk and that the call is recorded. Nobody is led to believe they are speaking to a person, and no guest has to ask.
Security
An American company, answering American hotels.
Cilicia AI LLC is a Wyoming company. Your guests call from all over the world — in eight languages — and every one of those calls is answered by a system built and run in the United States, by American vendors, under American law. There is no offshore call centre, no overseas operations team, and nobody outside the country listening to your guests.
- A US company, under US jurisdiction
- Every vendor in the chain is a US company
- Consent announced on every single call
- Card details never travel over the phone
Guests call from everywhere · the answer comes from here
On the call
What happens while the guest is still on the line.
Most of what protects a guest is not a setting somewhere — it is what the desk is built to be unable to do.
Card numbers never reach the phone
The desk cannot take a card, because it is never asked to. Payment happens on a link the guest opens themselves, through the hotel’s own payment provider. We do not request, see, transmit or store card details at any point.
A person is always one step away
The desk answers from the hotel’s own facts. A complaint, an unusual request, or a guest who simply wants a human is handed to your staff instead of improvised at.
Nothing is invented
If the hotel has not given an answer, the desk says so rather than guessing. Questions it could not answer are listed in your panel so you can add the real answer yourself.
Afterwards
What is kept, and who it belongs to.
Every call, written down
Full transcript and a short summary of each call, in your panel, minutes after the guest hangs up.
The hotel’s data is the hotel’s
Guest profiles, reservations and transcripts belong to the property. You can read, export or ask us to delete them.
Separated by property
Each hotel’s facts, guests and calls are stored under that hotel’s own id. One property’s data is never reachable from another’s panel.
The chain
Everyone who touches a call.
No hidden layers and no subcontractors abroad. Six companies stand between your guest and the answer, and every one of them is American. Your IT team will ask for this list — here it is before they do.
| Company | What it does | Headquarters |
|---|---|---|
| Twilio | Carries the phone call | San Francisco, California |
| ElevenLabs | The voice the guest hears | New York, New York |
| OpenAI | Understands what was asked | San Francisco, California |
| Supabase | Stores reservations and transcripts | San Francisco, California |
| Railway | Runs the call gateway | San Francisco, California |
| Vercel | Serves the panel and this site | San Francisco, California |
What is next
Not done yet, and said so.
A security page is only worth anything if the things on it are true today. These two are not, so they are here instead — with what is left to do.
In progress
Moving to Amazon Web Services
We are consolidating the gateway and the database onto AWS in US regions, so that the whole chain sits with one American provider under one agreement. Not done yet — this page will name the regions the day it is.
In progress
Formal certification
We are working towards recognised information-security certification. We will publish the registrar and the certificate number here when we hold one, and not a day earlier.
Ask us the awkward questions.
Retention periods, deletion requests, what your guests are told, what we would do in a breach. Send them over — or ask the desk yourself and hear how it answers.