Multi-Tenant Security
Every table carries a tenantId. Isolation gets enforced at the middleware, repository, and guard layers — cross-tenant access isn't just discouraged, it's architecturally prevented.
Tenant isolation architecture diagram
What you get
- JWT carries tenant context on every request
- Repository queries always filter by tenantId
- WebSocket rooms scoped per tenant for live events
More in Security
Related capabilities in the same part of Travix Cloud.
Access Management
Enterprise-grade IAM with RBAC and ABAC — 13 system role templates, a hierarchical permission catalog, teams, branches, data scopes, a session registry, and a policy engine with real financial guardrails.
Authentication & Session Security
TOTP-based two-factor authentication, OTP-based password reset, brute-force lockout, and a session registry with per-device revoke. Support impersonation always requires a reason and gets tagged for audit.
User & Role Management
Day-to-day user admin — invite, deactivate, reset passwords, assign roles — kept separate from the bigger Access Management module, so small teams get a fast, focused screen instead of an enterprise console.
Branch Management
Model your organization as a branch hierarchy with an exclusive head office, give each user a home branch, and let multi-branch staff switch locations for the session without ever logging out. Vouchers, customers, and reports all carry a branch, so operations and reporting stay location-aware.
Ready to run your agency on one ledger?
Join the travel businesses that traded spreadsheets and legacy ERP for a platform actually built around how agencies work.