Travel infrastructure for enterprise products.

Property platforms, marketplaces and HR suites can add travel under one commercial agreement. Your travel policy is checked by the API on every booking, whichever screen it comes from.

Scope an enterprise pilot Open the trust pack

At a glance

Who it’s for

Property platforms, marketplaces and HR software that want to offer travel.

The problem today

Each travel product brings another vendor, another contract and another security review.

With OnArrival

One agreement covers every travel product. Pass one security review, then roll out to every team.

Next step: Scope an enterprise pilot

Key facts

99.9% platform uptime, SLA-backed
SOC 2 Type II report, audited annually
Customer-managed keys on the Enterprise tier

Terms in plain English

SSO / SCIM: Single sign-on, plus automatic user sync from your identity provider.
SOC 2 Type II: An independent audit of how security controls work over time.
Policy as code: Travel rules written as settings the system checks on every booking.

Why enterprises pick us

One commercial agreement across travel products.

Single relationship

One agreement covers flights, stays, ground, experiences, insurance and payments.

Policy as code

Rules per traveller and cost centre are enforced on our servers, not in screens users can bypass.

Procurement-ready

SOC 2 Type II, a data processing agreement (DPA), a vendor risk pack, and customer-managed keys on the Enterprise tier.

Capabilities

Controls product can ship, and security can verify.

Identity

Control who gets in.

SSO and SCIM
Separate data per customer
Role-based access
Audit log streaming

Policy

Set the rules for every trip.

Approval workflows
Cost-centre routing
Spend caps and alerts
Per-traveller policy

Data

Get every event into your own systems.

Webhooks and streams
Warehouse sync
Personal-data tags per event
Custom retention

Trust

Pass the security review.

SOC 2 Type II
GDPR and CCPA aligned
Penetration testing
BAA on request

The governance surface

One console for every tenant.

See each customer's data separation, sign-in status, the rules in force and the live audit log. One view instead of four dashboards.

Tenants, isolated

Access controls keep each customer's data separate. Review the model with your security team.

Policy you can read

Spend, cabin and cost-centre limits shown as settings your auditor can check.

Audit you can stream

Every event goes to your security tools or warehouse in real time.

For the security review

Ready for your review.

SOC 2 Type II, a DPA, a vendor risk pack and customer-managed keys: the answers your security team asks for, ready before the first call.

Audited annually

SOC 2 Type II report shared under NDA during procurement.

Data stays yours

Separate data per customer, customer-managed keys, personal-data tags per event.

Policy on the server

Spend, cabin and cost-centre rules enforced by the API, not the screen.

From pilot to rollout

One security review, then every team.

Clear the security review, pilot in one product, then add products and teams without a second procurement cycle.

Scope
Security sign-off
The vendor risk pack, DPA and SOC 2 report clear review before any code ships.
Integrate
Connect sign-in, add the SDK
Set up SSO and SCIM, then add components or APIs styled to your product.
Govern
Set your travel rules
Rules per traveller and cost centre, plus approval routing, enforced on the server.
Expand
Roll out wide
Add products and teams under one contract. Every event goes to your warehouse.