Skip to content
OnArrival

Trust leaves an audit trail.

Every security, privacy and reliability claim should resolve to a control, an owner and evidence, across the full booking lifecycle.

Illustration: two colleagues review an open ledger together at a bright desk, a warm lamp lighting the page.
Type II controls
Scoped payment architecture
Operational coverage
Evidence, by concern

Start where your reviewer starts.

Open the control family, ownership model and operating record behind each claim.

Operational truth

A green dot must mean something.

The public status surface is a published snapshot unless it is backed by monitoring telemetry. Every status claim carries its freshness and source.

PUBLISHED STATUS

Platform health and incident history

Review the latest published platform snapshot, its effective timestamp and the incident record behind it.

Open status
Procurement path

Three reviews. No scavenger hunt.

01

Security

Architecture, SDLC, access controls and response process.

02

Commercial

SLA, support, liability and exit terms.

03

Privacy

DPA, subprocessors, retention and data flows.

Open the review
Bring your hardest question. Leave with an owner and evidence.

Related reading

All field notes →