# Keep card data out of inboxes and spreadsheets

Harbor by Signalry · hotel job `tokenize-card-flows`
https://harbor.signalry.ai/jobs/tokenize-card-flows

How and who for the hotel job—verified when attested. Advice unless labeled verified. This brief is a worksheet, not an appraisal and not a quote.

## The job

When a reservationist still pastes a PAN into email, I want a card flow I can draw so the number never lives in a mailbox or a night-audit workbook.

**Outcome the catalog names:** A card-flow diagram the GM can read, zero PANs in mail or sheets, and a watch on the new path. No SIEM you will not staff.

**Desk:** tech
**Urgency on the catalog:** This quarter
**Typical budget band (catalog, not a quote):** $18–45k + path changes
**Typical timeline (catalog, not a promise):** 6–12 weeks

## Scoped brief

Trace every place a card can live — PMS, POS, booking path, call-center tape, the spreadsheet the closer invented. Tokenize or shrink the box. Folio Security writes the plan; they do not sell the SIEM. Folio Watch alerts. Nobody auto-fixes a folio.

1. **Hunt the workaround.** The finding is usually a mailbox or a shared drive, not the PMS. Ask the night audit what they do when the terminal is down.
2. **Draw scope for the owner.** One page. In, out, cost to shrink. A diagram that needs a CISO is not done.
3. **Tokenize the path you will actually use.** A new terminal that nobody uses is theater. Train the desk on the path you kept.
4. **Watch exceptions; do not auto-fix money.** Alerts. A person opens the ticket. Silent ‘fixes’ create a second card flow.

## When not to buy

A scanner PDF that never traces the night-audit workaround from 2019.

## Provider shortlist

- [Folio Security Advisors](https://harbor.signalry.ai/providers/folio-pci) — people · PCI & hotel cyber after flag change. Catalog score 8.7 (post-job shape, not a verification).
- [Folio Watch Agent](https://harbor.signalry.ai/providers/folio-watch) — agent · Inventory & card-flow watch. Catalog score 8.4 (post-job shape, not a verification).
- [Northline PMS](https://harbor.signalry.ai/providers/northline-pms) — software · Property management system. Catalog score 8 (post-job shape, not a verification).
- [Keystone Switch PMS](https://harbor.signalry.ai/providers/keystone-switch) — software · PMS cutover & parallel run. Catalog score 8.3 (post-job shape, not a verification).
- [Vault Lane](https://harbor.signalry.ai/providers/vault-lane) — people · Card tokenization & PCI scope. Catalog score 8.6 (post-job shape, not a verification).

## Success the brief names

- Zero PANs in mail or sheets on a 30-day sample.
- Owner-signed card-flow diagram.
- Watch live within 30 days of the path change.

## Pitfalls

- Believing the franchise scan is the audit.
- A SIEM for 80 keys.
- An agent that auto-reconciles card exceptions.

---

Stable id: `tokenize-card-flows`
Source: Harbor by Signalry · https://harbor.signalry.ai
Verified Outcome is not insurance. Do not treat a catalog score as attested proof.