Stack and scope—integrate without lock-in; agents without master keys.

Replace a brittle PMS without a six-month outage

When the PMS is holding the desk hostage, I want a cutover I can roll back so we change systems without freezing groups for a season.

8–14 weeks including parallel run · 4 who · 1 case

Connect RMS to CRS without double bookings

When rates and inventory live in two brains, I want a single owner of the book so we stop overselling Saturday and underselling Tuesday.

4–8 weeks to a stable path · 3 who · 1 case

Keep card data out of inboxes and spreadsheets

When a reservationist still pastes a PAN into email, I want a card flow I can draw so the number never lives in a mailbox or a night-audit workbook.

6–12 weeks · 5 who · 2 cases

Let an agent act without a master key

When someone wants to ‘just connect the agent to the PMS,’ I want a scope I can draw so it can draft a date change without posting a folio or seeing every card.

2–6 weeks · 5 who · 2 cases

Folio Security Advisors

Franchise-change and stack-change PCI work that names what is actually in scope.

US

Vault Lane

Cuts card-present and virtual-card flows down to a token path a QSA can follow.

US, 80–400 rooms

Folio Watch Agent

Watches PMS/CRS inventory drift and card-flow exceptions. Alerts. Does not silently 'fix' a folio.

API-capable PMS/CRS

A 36-hour freeze, not a 36-day one

The Annex · 164 keys · Chicago, IL

Claim.

A 36-hour freeze, not a 36-day one.

Evidence.

Parallel-run log, rollback drill, folio balance, exception rate by night four.

Caveat.

Demo-shaped PMS. Use the method, not the logo.

One book. One Saturday.

Rivermark · 205 keys · Nashville, TN

Claim.

One inventory owner. The next oversell was caught before arrival.

Evidence.

Write-path diagram; drift alert at 14 rooms; three sold-out weekends.

Caveat.

The watch is noisy if you have not picked an owner. Draw first.

A flag change, a smaller card box

Pine Court · 88 keys · Flagstaff, AZ

Claim.

PCI gap closed without replacing the PMS or buying a SIEM.

Evidence.

Owner-signed card-flow diagram; watch live 20 days after the flag flip.

Caveat.

The franchise scanner was still submitted. It was not the audit.

Stand up guest messaging the desk actually uses

When guests already text and the desk still lives in email, I want one inbox the night audit will open so we answer in the guest's channel without an unmanned bot.

3–6 weeks to desk habit · 3 who · 1 case

Deploy an agent for reservation modifications

When the reservations inbox is date changes and add-ons, I want a narrow agent that drafts the work so a clerk can post the folio without drowning.

4–8 weeks to a trusted queue · 4 who · 1 case

Audit PCI after a franchise flag change

When the flag, the PMS, or the booking path just changed, I want a scope I can fund so card data is actually in a smaller box — not a scanner PDF in a drawer.

6–12 weeks to a funded plan · 4 who · 1 case

Stop selling the same room twice

When PMS and CRS disagree after a busy weekend, I want a guard so a sold room cannot be sold again — and a human who owns the disagreement.

2–6 weeks · 4 who · 1 case