# Enterprise Travel Infrastructure and APIs | OnArrival

> Enterprise travel infrastructure with policy-as-code, SSO and SCIM, SOC 2 Type II controls and one commercial contract for every product. See what ships.

Source: https://www.onarrival.com/solutions/enterprises

---

# Travel infrastructure for enterprise products.

Property platforms, marketplaces and HR suites can add travel under one commercial agreement. Your travel policy is checked by the API on every booking, whichever screen it comes from.

[Scope an enterprise pilot](https://www.onarrival.com/demo) [Open the trust pack](https://www.onarrival.com/security)

## At a glance

### Who it’s for

Property platforms, marketplaces and HR software that want to offer travel.

### The problem today

Each travel product brings another vendor, another contract and another security review.

### With OnArrival

One agreement covers every travel product. Pass one security review, then roll out to every team.

[Next step: Scope an enterprise pilot](https://www.onarrival.com/demo)

### Key facts

- 99.9% platform uptime, SLA-backed
- SOC 2 Type II report, audited annually
- Customer-managed keys on the Enterprise tier

### Terms in plain English

SSO / SCIM

Single sign-on, plus automatic user sync from your identity provider.

SOC 2 Type II

An independent audit of how security controls work over time.

Policy as code

Travel rules written as settings the system checks on every booking.

Why enterprises pick us

## One commercial agreement across travel products.

01

Single relationship

One agreement covers flights, stays, ground, experiences, insurance and payments.

02

Policy as code

Rules per traveller and cost centre are enforced on our servers, not in screens users can bypass.

03

Procurement-ready

SOC 2 Type II, a data processing agreement (DPA), a vendor risk pack, and customer-managed keys on the Enterprise tier.

Capabilities

## Controls product can ship, and security can verify.

### Identity

Control who gets in.

- SSO and SCIM
- Separate data per customer
- Role-based access
- Audit log streaming

### Policy

Set the rules for every trip.

- Approval workflows
- Cost-centre routing
- Spend caps and alerts
- Per-traveller policy

### Data

Get every event into your own systems.

- Webhooks and streams
- Warehouse sync
- Personal-data tags per event
- Custom retention

### Trust

Pass the security review.

- SOC 2 Type II
- GDPR and CCPA aligned
- Penetration testing
- BAA on request

The governance surface

## One console for every tenant.

See each customer's data separation, sign-in status, the rules in force and the live audit log. One view instead of four dashboards.

### Tenants, isolated

Access controls keep each customer's data separate. Review the model with your security team.

### Policy you can read

Spend, cabin and cost-centre limits shown as settings your auditor can check.

### Audit you can stream

Every event goes to your security tools or warehouse in real time.

For the security review

## Ready for your review.

SOC 2 Type II, a DPA, a vendor risk pack and customer-managed keys: the answers your security team asks for, ready before the first call.

### Audited annually

SOC 2 Type II report shared under NDA during procurement.

### Data stays yours

Separate data per customer, customer-managed keys, personal-data tags per event.

### Policy on the server

Spend, cabin and cost-centre rules enforced by the API, not the screen.

From pilot to rollout

## One security review, then every team.

Clear the security review, pilot in one product, then add products and teams without a second procurement cycle.

1. Scope Security sign-off The vendor risk pack, DPA and SOC 2 report clear review before any code ships.
2. Integrate Connect sign-in, add the SDK Set up SSO and SCIM, then add components or APIs styled to your product.
3. Govern Set your travel rules Rules per traveller and cost centre, plus approval routing, enforced on the server.
4. Expand Roll out wide Add products and teams under one contract. Every event goes to your warehouse.

At enterprise scale

## What review boards sign off on.

Get started

Plan your enterprise travel pilot.

[Scope a pilot](https://www.onarrival.com/demo) [Open the trust pack](https://www.onarrival.com/security)

Related

## Pairs well with

Most of our customers use two or three of these together.

[Travel sellers Run search, book, ticket and refund on one modern platform.](https://www.onarrival.com/solutions/travel-sellers)

[Corporate travel Policy at booking, approvals in-app, receipts that already reconcile.](https://www.onarrival.com/solutions/corporate)

[Embedded travel Bring the full travel stack into the product you already ship.](https://www.onarrival.com/solutions/embedded)