Security You Can Travel On
GGNomad is built on the Burdenoff platform's security foundations. Here's how we protect your account, your bookings, and your data.
Our Security Foundations
The practices we build on as we head toward launch.
Encryption in transit
Traffic is served over HTTPS/TLS, so data moving between your device and GGNomad is encrypted.
Role-based access (RBAC)
Every action is scoped by role and enforced through role-based access control inherited from the Burdenoff platform.
Least-privilege by design
Services receive only the identity context they need; sensitive operations are auditable and attributable.
Hardened infrastructure
Secrets live in a managed, per-environment secret store, images are scanned for vulnerabilities, and deployments flow through reviewed pipelines.
Trusted payments
Payments run on established, secure rails with transparent, itemized totals before you confirm.
Verified listings
Hosts and operators move through a verification lifecycle before their listings go live.
Data Residency & Enterprise Governance
Today, by default: all GGNomad Customer Data is hosted in India — backend services, databases and frontend assets are all served from cloud infrastructure in the Mumbai region. Role-based access control (RBAC) is enforced on every GraphQL field, every write carries an audit trail inherited from the Burdenoff platform, and enterprise SSO/SCIM are available on Enterprise plans.
Region selection and data-store pinning beyond the India default — a dedicated region, or self-hosted deployment for an Enterprise workspace — is available today only as a custom, contracted engagement through your Order Form, not yet as a self-serve control in the product. Building a fully self-serve, per-workspace region-pinning primitive is on our roadmap and depends on platform-level infrastructure decisions shared across Burdenoff products — we are deliberately not claiming it as already built.
Questions about a specific residency, governance or compliance requirement for your organisation? Talk to us at [email protected].
Report a Vulnerability
Found a security issue? We appreciate responsible disclosure. Email our team and we'll respond promptly.
[email protected]Have a Security Question?
We're happy to talk through how GGNomad keeps travelers, hosts, and partners safe.