Skip to main content
All Articles
PMSMar 24, 2026

What a Modern Hotel PMS Should Actually Do in 2026

Many hotels run dining, wellness, events, coworking, memberships or retail alongside accommodation. When choosing a PMS, review how those services connect to room bookings and guest records.

It Should Be an Operating System, Not a Point Solution

Map the systems needed for rooms, rates, reservations, restaurant sales, spa bookings, guest profiles, memberships, private hire and payments.

Check how those systems share customer identities and activity. Can reception see a restaurant order? Can the spa team recognise a returning guest who spent four thousand pounds on their previous stay?

Follow a guest from booking through check-in, on-site purchases and checkout. If a treatment, dinner and minibar order are charged to the room, confirm when each charge appears and how corrections are handled.

It Should Know Who Your Guests Actually Are

A shared profile can include room bookings, restaurant visits, treatments, events, memberships, loyalty, gift cards and spending across locations.

That history gives staff context during a visit. For example, reception may see that a returning guest stayed twice last year, usually books a spa treatment on the first morning and prefers a quiet restaurant table.

Relationships between guests can be useful too. Records of shared bookings, referrals and corporate accounts help teams understand groups that visit together.

Tiquo adds predictive customer lifetime value and expected next-order ranges alongside historic activity. Treat those predictions as estimates when using them to plan customer contact.

It Should Handle Multi-Entity Financials Automatically

Rooms, restaurants and spas may operate under different legal entities. Management companies, franchises and joint ventures can add further requirements to the way transactions are recorded.

If this applies to your property, test a bill that includes room charges, food and spa services. Confirm how payments are allocated, what invoices and records are produced, and which reconciliation tasks remain.

It Should Let Guests Self-Serve

Guests may want to check in, request a late checkout or pay from their phone. Decide which self-service tasks suit the property and where staff should remain involved.

Test the login and portal journey on a guest’s device. Review check-in, checkout, folio access, bill payment, additional bookings and membership or loyalty management.

Tiquo gives customers and companies stored credit for eligible products, services and bookings. Loads, redemptions, adjustments and refunds stay linked to the customer record and reporting.

If digital room keys or membership passes are part of the plan, confirm wallet support and hardware requirements during the review. Test the full arrival and access process.

It Should Work Across Every Device Without Compromise

Reception may check guests in at a terminal, while a restaurant manager reviews covers on a tablet. An events coordinator may need an enquiry on a phone, and housekeeping may update room status while moving between floors.

Test those tasks on the intended web browsers, iPhones, iPads, Android devices and POS hardware. Record any device-specific restrictions before rollout.

It Should Connect the Full Guest Journey

A guest may first visit an exhibition, return for dinner, join a membership programme and later book a room. Check whether the PMS can connect that earlier activity to the hotel stay.

A shared timeline helps staff understand the guest’s relationship with the property without checking several databases.

Connected booking flows can also offer relevant services, such as a spa package with a room. Ask which offers can be configured today and what information they use, rather than assuming a recommendation engine is included.

It Should Adapt to You, Not the Other Way Around

A 30-room boutique hotel, a 500-room conference hotel and a mixed-use property have different operating needs.

Test your own check-in steps, rate structures and reporting categories. Identify which settings staff can change and which require vendor support.

Include housekeeping, event quotations and contracts in that review. Check how forms, registration cards, waivers and digital signatures are captured and stored.

Where Tiquo Fits

Tiquo includes hotel property management alongside POS, bookings, ticketing, memberships, CRM, events, check-in, payments and analytics on a shared platform.

It is designed for hotels that want to manage accommodation and other services together, including mixed-use properties and multi-site portfolios.

Tiquo brings customer profiles, bookings, orders, payments, memberships, forms and reporting into one platform. PMS connections, payment routing, customer-facing apps and implementation services depend on the operator’s configuration and agreed scope.

© 2026 Tiquo. "Tiquo" and the Tiquo logo are registered trademarks of Tiquo Ltd.

GDPR · CCPA · PCI DSS · ICO · Cyber Essentials Certified · EU–US DPF · SOC 2 Type II (in progress) · ISO 27001 (in progress)

Security & Operational

  • 99.99% SLA Uptime
  • AES-256 encryption at rest
  • TLS 1.3 in transit
  • AES-256 / TLS 1.3
  • Perfect Forward Secrecy (PFS)
  • HTTP Strict Transport Security (HSTS)
  • 99.999999999% (11 nines) data durability
  • Automated backups
  • DDoS protection
  • Web Application Firewall (WAF)
  • Zero Trust posture
  • Role-Based Access Control (RBAC)
  • Principle of Least Privilege
  • Secret scanning in CI
  • SBOM generation
  • Dependency supply-chain controls
  • 24/7 infrastructure monitoring
  • GDPR Article 22 safeguards
  • Data Protection Impact Assessments (DPIAs)
  • Records of Processing Activities (ROPA)
  • SAML 2.0 SSO
  • EASIE SSO
  • OAuth 2.0 / OpenID Connect (OIDC)
  • SCIM 2.0 provisioning
  • MFA / 2FA enforcement
  • Responsible disclosure / bug bounty programme

Privacy, Data Protection & Statutory Obligations

  • ICO Registered
  • UK Modern Slavery Act 2015 compliant
  • UK Public Interest Disclosure Act 1998 compliant
  • EU Article 27 Representative appointed (Paris, France)
  • Swiss FADP Article 14 Representative appointed
  • UK GDPR compliant
  • EU GDPR/DSGVO compliant
  • UK Data Protection Act 2018 compliant
  • Swiss revFADP compliant
  • CCPA / CPRA compliant (California)
  • VCDPA compliant (Virginia)
  • CPA compliant (Colorado)
  • CTDPA compliant (Connecticut)
  • TDPSA compliant (Texas)
  • OCPA compliant (Oregon)
  • MCDPA compliant (Montana)
  • FDBR compliant (Florida)
  • ICDPA compliant (Iowa)
  • ICDPA compliant (Indiana)
  • TIPA compliant (Tennessee)
  • DPDPA compliant (Delaware)
  • NJDPA compliant (New Jersey)
  • NHDPA compliant (New Hampshire)
  • NDPA compliant (Nebraska)
  • MCDPA compliant (Minnesota)
  • MODPA compliant (Maryland)
  • KCDPA compliant (Kentucky)
  • RIDTPPA compliant (Rhode Island)
  • Canada PIPEDA compliant
  • Quebec Law 25 compliant
  • Alberta PIPA compliant
  • British Columbia PIPA compliant
  • Singapore PDPA compliant
  • Hong Kong PDPO compliant
  • Brazil LGPD compliant
  • Japan APPI compliant
  • Australia Privacy Act / APPs compliant
  • India DPDPA 2023 compliant
  • Thailand PDPA compliant
  • Malaysia PDPA 2010 (as amended 2024) compliant
  • New Zealand Privacy Act 2020 compliant
  • South Africa POPIA compliant
  • UAE PDPL compliant
  • Mexico LFPDPPP compliant
  • Kenya Data Protection Act 2019 compliant
  • Ghana Data Protection Act 2012 compliant
  • Nigeria NDPA 2023 compliant
  • Indonesia PDP Law 2022 compliant
  • Philippines Data Privacy Act 2012 compliant

Global Fiscal & E-Invoicing

  • EN 16931 - EU e-invoicing core standard
  • UBL 2.1 - Universal Business Language
  • Austria - RKSV
  • Belgium - Peppol BIS 3.0 (B2B)
  • Czechia - fiscalization
  • Croatia - Fiscalization 2.0
  • Denmark - Peppol BIS 3.0 (B2B)
  • France - NF525 / LNE / Infocert, Factur-X / PDP, E-Reporting
  • Germany - KassenSichV / TSE, DSFinV-K, GoBD, E-Rechnung B2B (XRechnung / ZUGFeRD)
  • Hungary - Online Szamla
  • Italy - Scontrino, FatturaPA (via SDI)
  • Lithuania - i.SAF / i.MAS
  • Norway - Peppol BIS 3.0 (B2B), SAF-T
  • Poland - KSeF
  • Portugal - ATCUD/QR, SAF-T PT
  • Slovakia - eKasa
  • Slovenia - fiscalization (davcno potrjevanje)
  • Spain - FacturaE, SII, VeriFactu, TicketBAI
  • Sweden - SKVFS (certified cash registers)
  • Argentina - ARCA (Q4 2026)
  • Australia - Peppol PINT A-NZ (Q4 2026)
  • Brazil - NFe, NFCe, NFSe (Q4 2026)
  • Chile - SII Chile (Q4 2026)
  • Colombia - DIAN (Q4 2026)
  • Finland - Finvoice, TEAPPSXML (Q4 2026)
  • Japan - JP PINT (Peppol) (Q3 2026)
  • Malaysia - Peppol Malaysia (Q4 2026)
  • Mexico - CFDI (Q4 2026)
  • New Zealand - Peppol PINT A-NZ (Q4 2026)
  • Peru - SUNAT (Q4 2026)
  • Romania - Peppol (RO e-invoice) (Q4 2026)
  • Saudi Arabia - ZATCA (Q4 2026)
  • Singapore - Peppol BIS 3.0 (Q4 2026)
  • United Arab Emirates - Peppol (5C) (Q4 2026)

Standards & Frameworks

  • Cyber Essentials Certified
  • SOC 2 Type II - audit in progress
  • ISO/IEC 27001 - audit in progress
  • NIST Cybersecurity Framework - aligned
  • NIST Privacy Framework - aligned
  • NIST SP 800-53 / 800-63 / 800-63B - aligned
  • NIST AI Risk Management Framework - aligned
  • CIS Critical Security Controls / CIS Benchmarks - aligned
  • OWASP ASVS & OWASP Top Ten - aligned
  • ISO 25010 (quality) - aligned
  • ISO 31000 (risk) - aligned
  • ITIL - aligned
  • W3C Web Standards - aligned
  • OpenAPI Standard - aligned
  • DevSecOps practices - aligned
  • ePrivacy Directive - aligned
  • EU Whistleblowing Directive (2019/1937) - aligned

Payments Compliance

  • PCI DSS Level 1
  • PSD2 / Strong Customer Authentication
  • 3D Secure (3DS)
  • EMVCo Level 1 & 2
  • AML / KYC controls
  • Sanctions screening (OFAC, UN, EU, HMT)

International Data Transfer Mechanisms

  • EU-US Data Privacy Framework
  • EU Standard Contractual Clauses (Decision 2021/914) - Modules 2 & 3
  • UK International Data Transfer Agreement (IDTA) + ICO Addendum
  • Swiss FDPIC-recognised transfer mechanisms
  • APEC Cross-Border Privacy Rules (CBPR)

Accessibility Compliance

  • ADA (Americans with Disabilities Act) - aligned
  • European Accessibility Act (EAA) 2025 - aligned
  • WCAG 2.2 - aligned
  • EN 301 549 - aligned
  • WAI-ARIA - aligned

A single platform for hotels, spas, classes, events, restaurants, and more.

Tiquo Ltd
London, UK

LinkedInTop Performer Spring

We use cookies

Choose whether to allow cookies for analytics and advertising. You can accept or decline them. Closing this notice declines them.

Learn more