// SECURITY, MULTI-PROPERTY & PLATFORM

One platform to run a whole portfolio — and resell it under your own brand.

EloPMS is delivered as a true multi-tenant SaaS platform. Every business is fully isolated, every property runs and brands independently, access is controlled to the field level — with a Super Admin control plane for operators and a white-label Partner program for resellers.

Start Free Trial Schedule a demo
True multi-tenant isolation Field-level permissions White-label ready Full audit trail
Group Console · Switch Property HQ ROLL-UP
3 PROPERTIESOCC 79%ARR 42REV 1.4M
Pearl Continental · LHEACTIVE
● OnlineOCC 82%74 roomsA4 print
Seaview Resort · KHISwitch →
● OnlineOCC 74%120 roomsThermal 80mm
Hilltop Lodge · MRENo access
○ Restricted28 roomsA5 print
Secure by design
PasswordsHashed
Secrets at restEncrypted
Tenant isolationEnforced
Audit trailFull
// MULTI-COMPANY & MULTI-PROPERTY

One company. Every property. One head-office view.

Each business is its own isolated company (tenant), holding as many branches or properties as your plan allows — each with its own identity, print settings and scoped data, rolled up to head office.

Company as tenant — each business is its own company with completely separate data, and no customer can ever see another's records.
Unlimited branches / properties — subject to plan limits — each with its own name, print name, address, city, phone, email, tax number (NTN), logo and print settings.
Per-branch operational settings — paper size (A4, A5, thermal 80mm, thermal 58mm), logo-on-print toggle, timezone, date and time formats, POS mode (retail, restaurant or both) and catalog-sharing.
Branch-scoped everything — users, employees, attendance, payroll, sales, purchases, accounting and dashboards are all scoped to the active branch, with head-office roll-up.
Self-provisioning — each new branch is provisioned with its own subscription record and accounting structure, and enforces the plan's branch limit.
Clear-branch-transactions tool — securely wipe a property's transactional data to start fresh: password-verified, permission-gated, transaction-safe, master data preserved and audit-logged.
Delete protection — the main branch can't be deleted, and no branch with transactions can be removed.
Head-office roll-up · all properties
3
Properties
79%
Group occupancy
222
Rooms · portfolio
Per-property identity
Pearl Continental · LHENTN · A4 · PKT
Seaview Resort · KHINTN · 80mm · PKT
Hilltop Lodge · MRENTN · A5 · PKT
Main branch · protected Clear-txn · password-gated
// ROLES & GRANULAR PERMISSIONS

Control access down to a single field on a single form.

Roles carry a granular permission catalog spanning every module — and administrators can lock specific fields on specific forms for specific roles, so front-desk staff never see cost or price.

Permission Matrix · Roles × Modules RBAC
FRONT DESK
MANAGER
ACCOUNTS
Reservations
Edit
Edit
View
Accounting
None
View
Edit
Reports
None
Edit
View
Settings
None
View
None
Field-level lock · Booking form
Room cost / price field · Front Desk HIDDEN
Room cost / price field · Manager VISIBLE

User management

Per company and branch, with active/inactive status, password management and self-service profile and password updates. User creation enforces the subscription's user limit, and every user is company-scoped — so cross-tenant access is blocked at the controller level.

Roles & the permission catalog

Roles with descriptions, assignable granular permissions and optional account-group restrictions. A broad catalog spans every module — Sales, Purchases, Inventory, Accounting, HRM/Payroll, CRM, POS, Reports, Settings and platform administration — grouped by module, with a "my permissions" endpoint the interface uses to hide menu items and disable actions per user.

Field-level permissions

Administrators can lock specific fields on specific forms for specific roles — for example, hide cost and price fields from front-desk staff — so sensitive commercial data never leaves the people who need it.

User provisioning controls

Tied to POS and cash: enable a cash register per user, assign a default cash payment method, restrict to specific warehouses and payment methods, and optionally link a user to an employee record.

// BRANDING & PRINT

Your identity on every document — printed exactly your way.

A company profile with logo and tax identity, print settings you can override per branch, per-document paper sizes, and POS and accounting preferences to match how your properties actually run.

Company Profile

Name, email, phone, full address, tax number (NTN), website, logo, base currency, timezone, date format and fiscal-year start — plus optional Hijri (Umm al-Qura) date display alongside Gregorian.

Print Settings

With branch-level override: paper size, orientation, show/hide logo, address, tax breakdown, signature, barcode, bank details and ledger balance; number of invoice copies; a duplicate-copy watermark; custom footer text; and custom print CSS.

Per-Document Paper Sizes

Set a different paper size for each document type — sale invoice, return, quotation, order, delivery note, POS receipt, purchase invoice, GRN and vouchers — independently of the global default. Print anywhere on A4, A5 and 80mm/58mm thermal.

POS Settings

Stock-visibility and negative-stock rules, print preview and number of prints, receipt header/footer, barcode-on-receipt, table management and grid size, KOT enable and auto-print, default warehouse and payment method, and barcode-scan focus behavior.

Accounting Preferences

Document numbering prefixes and next-numbers, stock costing method (FIFO / average / LIFO), currency and number formatting, default tax and payment method, and a default invoice footer and terms.

Per-Branch Overrides

Every property carries its own name, print name, tax number, logo and print configuration — so a resort on thermal receipts and a city hotel on A4 invoices run side by side under one company, each looking exactly right.

// PARTNER / RESELLER PROGRAM

Sell the whole platform under your own brand.

Agencies and resellers can offer EloPMS as their own product — with their logo, colors and custom domain on every tenant they onboard. The program is entirely opt-in: direct signups keep the standard interface.

Partner Branding · Tenant Login WHITE-LABEL
Y
Your Agency Suite
powered by your brand
CUSTOM DOMAIN · CNAME TARGET
app.youragency.com● live
PRIMARY COLOR
#7A5CF0
SUPPORT EMAIL
help@youragency.com
Logo Favicon Co-branded signup
Referred companies 18 active

Partner onboarding

An application and registration flow with approval status and a partner-agreement step, a separate partner login, and a dedicated partner dashboard showing referred companies and business.

White-label branding, inherited

Every tenant a partner onboards inherits the partner's company name, logo, favicon, primary color, support email and custom-domain (CNAME) target — replacing EloPMS's defaults on the tenant's authentication screens and interface.

Embeddable, co-branded signup

Bring in new customers under your own brand with an embeddable, co-branded signup. Direct signups with no partner keep the standard EloPMS interface, so the program is entirely opt-in.

// SUPER ADMIN · PLATFORM OPERATIONS

A control plane for operators — every tenant, plan and module.

Provision and manage companies, decide exactly which modules each one sees, define subscription plans and limits — and let every customer track their own usage and upgrade path.

Per-company module entitlements
✓ PMS / Hospitality ✓ POS / FBR e-invoicing ✓ Banquet ✕ Gaming ✓ ZATCA e-invoicing ✕ Requisitions ✕ Projects PLAN · GROWTH · 25 USERS · 5 BRANCHES

Tenant lifecycle

Provision and manage companies end to end — create companies, and activate, suspend / deactivate or manage them from one place.

Module entitlements

Enable or disable modules and paid add-ons per tenant — POS/FBR e-invoicing, ZATCA e-invoicing, hospitality/PMS, banquet, gaming, requisitions, project management — so each customer only sees what they've bought.

Plans & limits

Define subscription packages with feature sets, module toggles and limits (max users and branches), pricing, billing cycle and trial periods — and assign plans to companies.

Platform operations

Package and catalog management, platform-wide dashboards and analytics, partner / reseller management, and super-admin user management for platform staff.

Tenant billing views

Tenant-facing billing and subscription screens let each customer see their current plan, usage against limits and upgrade path — no support ticket required.

Limits enforced

Subscription limits on users and branches are enforced by the platform — user and branch creation stops at the plan's ceiling, keeping every tenant inside what they signed up for.

// MULTI-TENANT ISOLATION & SECURITY

Secure by design — from the database up.

Complete data isolation per tenant, access enforced server-side on every request, hashed passwords and encrypted secrets at rest, password-verified destructive actions, and a full audit trail of sensitive operations.

Security Posture SERVER-SIDE
User passwordsHASHED
Integration secretsENCRYPTED · AT REST
Tenant dataFULLY ISOLATED
Cross-tenant accessDENIED
Destructive action · confirm
Clear branch transactionsPASSWORD REQUIRED
•••••••••••• verified ✓
Audit trail
user:11 · clear_txn · KHI06 Jul 14:22
user:03 · role_update06 Jul 13:57
user:03 · deposit_refund06 Jul 11:04
Complete data isolation per tenant — each company's data is fully separated so no customer can ever see another's records.
Company-scoped access, server-side — enforced on every request, with explicit cross-tenant-access denial in controllers.
Field-encrypted secrets & hashed passwords — biometric-device and integration credentials stored encrypted at rest; user passwords hashed, never stored in the clear.
Password-verified, permission-gated destructive actions — always wrapped in safe transactions, so a slip never leaves your data half-changed.
Granular, role- and field-level access control — limits exposure of sensitive commercial and personal data to exactly the people who need it.
Full audit trail of sensitive operations — a running record of who did what and when, backing every destructive or privileged action.
Subscription limits enforced — on users and branches, keeping every tenant inside the plan they signed up for.
Bring-your-own integrations, safely — connect your own OTA, payment-gateway, messaging and biometric accounts; the credentials are yours, stored encrypted and never hardcoded.
// EVERYTHING IN THE PLATFORM

The full platform, security & multi-property list.

Every capability across multi-tenancy, access control, branding, the partner program, the control plane and security — at a glance.

Company as tenantEach business its own company with completely separate data
Unlimited propertiesBranches per company (plan limits), each with its own identity
Per-branch settingsPaper size, logo, timezone, formats, POS mode, catalog-sharing
Branch-scoped dataUsers, payroll, sales, accounting, dashboards, head-office roll-up
Self-provisioningOwn subscription & accounting per branch, plan limit enforced
Clear-branch-transactionsPassword-verified, permission-gated, master data preserved, audit-logged
Delete protectionMain branch and any branch with transactions can't be removed
User managementPer company/branch, active/inactive, self-service profile updates
RolesDescriptions, granular permissions, optional account-group limits
Permission catalogEvery module, "my permissions" hides menus & disables actions
Field-level permissionsLock specific fields on specific forms for specific roles
User provisioningCash register, default method, warehouse limits, employee link
User limit enforcedEvery user company-scoped, cross-tenant blocked at controller
Company profileContact, NTN, logo, currency, timezone, date, fiscal-year start
Print settingsBranch-override logo, tax, signature, barcode, watermark, CSS
Per-document paper sizesInvoices, returns, quotations, orders, receipts, GRNs, vouchers
POS settingsStock rules, receipts, barcode, tables, KOT, defaults, scan focus
Accounting preferencesNumbering, costing (FIFO/avg/LIFO), default tax, footer/terms
Hijri datesOptional Umm al-Qura display alongside Gregorian
Partner onboardingApplication, approval status, partner-agreement step
Partner dashboardSeparate login, referred companies and business
White-label brandingName, logo, favicon, color, support email, custom domain inherited
Co-branded signupEmbeddable; direct signups keep standard EloPMS, fully opt-in
Super Admin tenantsCreate, activate, suspend/deactivate & manage companies
Module entitlementsPMS, POS/FBR, ZATCA, banquet, gaming, requisitions, projects
Subscription plansFeature sets, user/branch limits, pricing, billing, trials
Platform operationsCatalog, dashboards, analytics, partner & admin management
Tenant billing viewsCurrent plan, usage against limits, upgrade path
Data isolationServer-side company-scoped access, explicit cross-tenant denial
Encrypted & hashedSecrets encrypted, passwords hashed, destructive actions gated
Audit trailRole- & field-level control, sensitive-op log, limits enforced
// KEEP EXPLORING

The platform ties every module together.

Run the portfolio. Own the brand. Sleep on the security.

One isolated tenant per business, field-level access control, and a white-label partner program — see the whole platform running on your own properties in minutes.

Start Free Trial Schedule a demo
Schedule a demo