Security You Can Travel On
GGNomad is built on the Burdenoff platform's security foundations. Here's how we protect your account, your bookings, and your data.
Our Security Foundations
How we protect travelers, groups and the businesses that serve them.
Encryption in transit
Traffic is served over HTTPS/TLS, so data moving between your device and GGNomad is encrypted.
Role-based access (RBAC)
Every action is scoped by role and enforced through role-based access control inherited from the Burdenoff platform.
Least-privilege by design
Services receive only the identity context they need; sensitive operations are auditable and attributable.
Hardened infrastructure
Secrets live in a managed, per-environment secret store, images are scanned for vulnerabilities, and deployments flow through reviewed pipelines.
Trusted payments
Payments run on established, secure rails with transparent, itemized totals before you confirm.
Verified businesses
Hosts, operators, rental fleets and transport providers move through verification before their listings go live.
Consent for what you connect
Connected travel apps, mailbox imports, location sharing and travel documents are opt-in, scoped to the trip and revocable.
Documents shared per booking
Passports, licences and IDs are stored encrypted and shared only with the provider of the booking that needs them.
AI inside the same rules
The companion acts with your permissions, asks before booking, paying or cancelling, and is metered and audited.
Data Residency & Enterprise Governance
By default: all GGNomad Customer Data is hosted in India — backend services, databases and frontend assets are all served from cloud infrastructure in the Mumbai region. Role-based access control (RBAC) is enforced on every GraphQL field, every write carries an audit trail inherited from the Burdenoff platform, and enterprise SSO/SCIM are available on Enterprise plans.
Region selection and data-store pinning beyond the India default — a dedicated region, or a self-hosted deployment for an Enterprise workspace — is arranged as a contracted engagement through your Order Form.
Questions about a specific residency, governance or compliance requirement for your organisation? Talk to us at [email protected].
Report a Vulnerability
Found a security issue? We appreciate responsible disclosure. Email our team and we'll respond promptly.
[email protected]Have a Security Question?
We're happy to talk through how GGNomad keeps travelers, groups and travel businesses safe.