Products › Security & compliance
Your data kept safe, separate and accounted for.
Encrypted, backed up and kept apart from every other business, with two-step log-in, roles and a full audit log. UK GDPR tools are built in, so requests are handled from one place.
Accounted for, every step
An audit trail, data requests handled and two-step log-in.
Who did what, and when
One newest-first record of actions, including your AI team’s.
- Filter by person, area and date
- What the AI did and who approved it
- Changes to customer records tracked
Included with security & compliance
The questions your IT and data protection leads will ask, answered.
Encrypted throughout
Your data is encrypted in transit and at rest, from bookings and payments to customer records and files.
Hosted in London
Your database is hosted in London, UK, with point-in-time backups kept for 7 days, so it can be recovered if something goes wrong. You don’t have to run backups yourself.
Kept separate
Each business’s data is kept apart from everyone else’s, and every request is limited to your own account. Brands within your group can be kept apart too.
Two-step log-in
Use an authenticator app to log in, with a fresh code needed for sensitive actions. It protects your account even if a password leaks.
Audit logs
One newest-first record of actions across your account, including what your AI team did and who approved it. Changes to customer records are tracked too.
UK GDPR tools
Handle access and erasure requests, see how much of your list has given consent, and keep a record of every consent. Marketing only goes to people who agreed.
Every feature, in detail
Everything below comes with every plan, at one price per site, with no add-ons or per-user fees. Open each area underneath for the rest.
More features, by area
5 features
| Feature | Every plan |
|---|---|
| Data requests answered with a full export | ✓ Included |
| Erasure across bookings, orders, loyalty and marketing | ✓ Included |
| Unsubscribe and preference centre for every customer | ✓ Included |
| Cookie consent that tracking follows | ✓ Included |
| Retention rules that remove old records | ✓ Included |
6 features
| Feature | Every plan |
|---|---|
| See every device a staff PIN has signed in from | ✓ Included |
| A log of every time the mDOS team accessed your account, and why | ✓ Included |
| Every guest-data export needs sign-off, works once and expires | ✓ Included |
| A warning before an old file is deleted, with one-click keep or download | ✓ Included |
| A daily email whenever the mDOS team accessed your account | ✓ Included |
| A lost staff device revoked or wiped in one step | ✓ Included |
Make it yours. Let it do the legwork.
Work three ways: do it yourself, ask your AI teammate, or let them draft it and take over. A draft lands as a normal item you can edit, not a block of text to copy and paste.
Your rules
Choose which roles need two-step log-in, how long records are kept, and stricter limits for your company.
Erasure in one step
A data request is answered with a full export, and erasure runs across bookings, orders, loyalty and marketing at once.
Chloe drafts it, you take over
Do it yourself: write your policies yourself.
Ask Chloe: Chloe drafts your privacy policy, terms or cookie policy from your own records.
Or take over the draft: it lands as a draft document in your approvals, with anything unknown marked for you to confirm.
FREE · NO ACCOUNT · NO CARD
Try the AI agents free (Beta)
Give it a simple brief and the AI team builds a campaign, emailed to you with a read-only link. The picture shows what came back for a demo hotel’s brief.
- Sienna, Marco, Rosa and 6 more desks
Strategy, emails, social posts, a landing page and ads, checked for brand and compliance
Built for trust
The protections behind every plan, in plain words.
Undo
Destructive actions show an Undo button with a countdown, so a slip is easy to put right.
A tamper-evident log
The access log is append-only and checked every day, so a change can’t be quietly rewritten.
Our access, reported
Your admins get an email on any day the mDOS team accessed your account.
Approval first
Anything with money or brand risk waits in Approvals for a person to say yes.
Zero default automations
No email, reminder or automation runs until a company administrator switches it on.
Inheritance
Settings flow from company to brand to site, with groups of sites, so every site follows your rules.
Works offline
The till, staff app, forms and ticket scanner keep working when the signal drops.
Device kill switch
A lost staff device can be revoked or wiped, so it stops syncing.
Keyboard-first
A command palette and keyboard shortcuts, with focus handled properly in every dialog.
What it replaces
Less chasing when someone asks for their data.
GDPR requests by hand
Searching every system for one person’s data when they ask for it, against the clock. Access and erasure requests run from one screen, across everything in mDOS.
A log in every tool
Piecing together who did what from five different systems after something goes wrong. The audit log covers your whole account in one place, newest first.
Password-only log-ins
Tools that rely on a password alone, with everyone able to see everything. Two-step log-in and role-based access come with every plan.
YOUR AI TEAM, KEPT IN BOUNDS
Your AI team follows the same rules
It works around the clock once you switch it on. Nothing goes out without your approval.
Fenced to your business
The AI only reads your own business’s data, and one site’s details never slip into another site’s work. Checks stop one site’s prices or times appearing in another’s copy.
Every action recorded
What the AI team did, and who approved it, is kept in your audit log alongside everything your people did.
Personal details hidden
An optional setting removes customer names and contact details before anything is sent to an AI model, then puts them back in the result.
Set up by real people, supported by AI. An mDOS Expert Partner sets up two-step log-in, roles and your GDPR settings with you, and can walk your IT or data protection lead through how it all works before you go live.
Switch at your own pace
Move one system at a time, with nothing switched off before it’s replaced. Keep your current systems while their contracts run out, we move your history across securely, and we plan the switch with you, including what your data protection lead needs to sign off.
Three things no one else brings together
Security covers the whole team: your software, your AI agents and the people helping you. mDOS holds all three to the same rules.
World-leading software
Encrypted, backed up and kept apart from every other business, with two-step log-in, roles, a full audit log and UK GDPR tools.
Tireless AI agents
AI agents only read your own business’s data, every action they take is in your audit log, and an optional setting hides customer details from the AI model.
Real experts driving it
An mDOS Expert Partner sets up two-step log-in, roles and GDPR settings with you, and can walk your IT or data protection lead through how it works.
Support from a real marketing team
mDOS is built and operated by MDOS AI LTD. When you message or phone us, real Marketing Experts answer, on every plan, led by our Founding Partner Agency, Mr Digital. Here are five ways we help you get results.
Chat with our marketing experts
Message us from any screen in mDOS. The people who answer are marketers from our partner agencies, not a call centre.
- Live chat on every plan, from the Chat button on every page, and you can phone us when you need to
- Answered by marketing experts from our partner agencies, the same people who run marketing for clients
- Ask about the software or your marketing: setup, campaigns and results
- AI support for quick answers whenever you need one
Included in every plan
