System Architecture
v2.4 · Production
Privacy Layer

Zero-Trust PII Deconstruction

Compromise.js tokenizes all guest names, room numbers, and staff IDs locally on device. Identity maps exist only in RAM — never written to disk, never transmitted.

Extraction Engine

Multi-Pass Atomic Extraction

8 semantic field groups processed independently — datetime, location, personnel, severity, emergency services, actions, cause, documentation. Confidence floor: 0.50.

→ date & time extraction
→ location & area mapping
→ personnel & witness identification
→ severity assessment
→ emergency services check
→ actions taken
→ cause & outcome analysis
→ documentation & evidence
Integrity

SHA-256 Cryptographic Anchoring

Every completed report is fingerprinted at export. Post-export modifications are detectable. Append-only. Immutable.

Phase Flow
INTAKE → TYPE_CONFIRMED → FOLLOW_UP
→ NARRATIVE_REWRITE → REVIEW → EXPORTED
v2.4_PRO · Privacy by Design SHA-256
lockPrivacy by Design verifiedSHA-256 Signed shieldGDPR-Aligned gavelLegally Defensible

YOUR STAFF
REMEMBERS
DIFFERENTLY.

The system doesn't.

Tidemark turns messy staff accounts into audit-ready, cryptographically signed incident reports. In minutes. Built for hotel operations, not developers.

Scroll
16
Incident Playbooks
<90s
Per Report
0.50
Confidence Floor
0 PII
Transmitted to Cloud
The Problem

THE PAPER LOG
FAILED YOU BEFORE.
IT WILL AGAIN.

Every property has a system. None of them were built for the moment you're standing in the lobby at 2am trying to remember exactly what happened.

description

The Paper Log

Illegible handwriting. Missing dates. Pages that disappear. No structure. No audit trail. And when the lawyer asks for the original — you produce a photocopy.

Fails in litigation
mail

The Email Chain

Thread splits. Key detail buried in reply 14. No structure. Different people remember different versions. Guest names in the subject line. A GDPR nightmare.

No chain of custody
table_chart

The Google Doc

Version confusion. Edit history anyone can manipulate. Guest PII in a consumer cloud product. Your insurance adjuster will have questions. You will not have answers.

Exposes PII to third parties
gavel

1 in 3 hospitality liability claims involves an inadequate incident record.

Based on industry analysis of hospitality insurance claim outcomes. An undocumented incident is an open liability. Tidemark closes it.

The Protocol

CAPTURE THE STORY.
STRUCTURE THE FACTS.
DEFEND THE PROPERTY.

No forms. No training. Just a conversation between your staff and the system.

01
record_voice_over

Capture the Mess

Your staff speaks or types exactly what happened. They don't need to know the playbook—Tidemark listens, asks clarifying questions, and ensures nothing is missed.

Action: INTAKE
02
memory

Atomic Extraction

The engine strips names locally, then extracts facts into 16 incident categories. It builds a timeline, identifies witnesses, and assesses severity with zero PII exposure.

Action: EXTRACTION
03
verified

Defensible Record

You receive a structured, SHA-256 anchored report. It's ready for your insurance adjuster or legal team in minutes, not days. A permanent, immutable audit trail.

Result: ARCHIVED
Operational Reality

FROM LOBBY SLIP
TO SIGNED REPORT.
IN 300 SECONDS.

02:14 AM · The Incident

Guest slips in the lobby.

The Night Auditor is alone. The floor is wet. The guest is upset. Traditional reporting means a paper form and a 3am phone call to the GM.

mic

Staff speaks to Tidemark

"I'm in the lobby. A guest just slipped near the elevators. Her name is Margaret. She says her ankle hurts. I've offered ice and called for a manager."

Audit-Ready Output
SHA-256
Type SLIP / TRIP / FALL
Location MAIN LOBBY / ELEVATORS
Injury LOWER EXTREMITY (ANKLE)
Action MEDICAL OFFERED / MGMT CALLED
HASH: 3a7f9b2c8e0d5f2a9b6c3d7e...
Ready for Insurance Export
Live Demonstration

WATCH IT WORK.

This is the actual system. The anonymization you see is real. The extraction pipeline you see is the real engine running against the real incident.

PII Tokenization Loop
Runs locally · Zero transmission
Raw Intake — On Device
"Guest slipped in the lobby — her name is Margaret Holloway, she's in room 318. Reported by David Okafor."
lock
Tokenized on device
Cloud-Safe Payload — Transmitted
"Guest identified as [GUEST_1] experienced a slip... room [ROOM_2]. Reported by [STAFF_3]."

Identity maps live only in RAM. No PII is ever written to disk or sent to the cloud model.

Extraction Engine
Multi-pass · Confidence ≥ 0.50
0%
Structured Output · Verified
Severity MEDIUM
Location MAIN LOBBY
Injury Status WRIST & ANKLE PAIN
Medical Offered YES
Coverage

16 INCIDENT TYPES.
ONE CONSISTENT
PROTOCOL.

Every playbook defines the exact fields required for that incident type. The system asks for what's missing. It never guesses what it can't confirm with confidence.

security
Theft & Security
theft · intrusion · assault
medical_services
Medical — Guest
illness · injury · emergency
healing
Medical — Staff
workplace injury · first aid
accessible
Slip / Trip / Fall
wet floor · debris · uneven
local_fire_department
Fire & Life Safety
fire · alarm · evacuation
construction
Property Damage
structural · interior · fixtures
format_paint
Vandalism
graffiti · damage · destruction
no_meeting_room
Unauthorized Entry
trespass · breach · access
volume_off
Noise Disturbance
complaint · noise · disruption
sentiment_dissatisfied
Guest Complaint
service · cleanliness · billing
warning
Assault / Threat
harassment · threat · violence
settings_suggest
Equipment Failure
HVAC · elevator · utilities
restaurant
Food Safety
contamination · illness · storage
directions_car
Vehicle & Parking
collision · theft · damage
hub
General
catch-all · custom · other
add_circle
Custom Playbooks
your property · your rules
Architecture

THE MODEL IS
A TOOL.
NOT THE DRIVER.

Every state transition, every question, every completion decision is made deterministically by code. The AI fills in facts. The Orchestrator makes every decision. Hallucinations are structurally impossible.

account_tree

Logic-First Architecture

The Orchestrator is the state machine. It determines which question to ask next, whether a field is sufficiently answered, and when the report is complete. The AI fills in facts. The code makes every decision.

0%
Decision Drift
100%
State Control
6
Phase States
radar

Confidence Floor: 0.50

Any extracted field below 0.50 confidence is discarded. The system asks explicitly. It never guesses when the stakes are unclear.

Discard Accept ≥ 0.50
rule

Required Fields Enforced

Each playbook defines its required fields. The report cannot be marked complete until every required field is answered with sufficient confidence. No partial records leave the system.

Integrity Protocol

PAPER LOGS
FAIL IN COURT.
OURS DON'T.

Every report is SHA-256 fingerprinted at the moment of export. Any post-export modification — to any character — produces a different hash. Tampering is immediately detectable. The audit trail is append-only and immutable.

SHA-256
Cryptographic Anchor
ZERO
PII in Cloud
Audit Retention
Report Hash · SHA-256
_
PII_STRIP · VERIFIED INTEGRITY · CONFIRMED
Built For

NOT ENTERPRISE.
NOT FOR DEVELOPERS.
FOR OPERATORS.

Tidemark is built specifically for small and mid-scale hospitality operations — the properties where the GM is also the security lead, the HR department, and the person who answers the phone at 3am.

hotel

Independent Hotels

Boutique properties, motels, and bed & breakfasts with 10–200 rooms. Properties where liability exposure is real and legal resources are limited. Where one undocumented incident is one too many.

apartment

Property Managers

Multi-unit residential, extended-stay, and mixed-use properties. Operations with rotating staff who need a consistent protocol regardless of who's on shift — at any hour.

stadium

Venues & Operators

Event spaces, conference centres, and hospitality venues where incidents happen fast, staff turnover is high, and insurance documentation requirements are non-negotiable.

Availability

BUILT FOR THE
FLOOR, NOT THE
BOARDROOM.

Your team is on the floor when incidents happen. Tidemark is where they are.

phone_iphone
iOS
Join Waitlist

iPhone-native. For in-the-moment capture — from the lobby, the stairwell, the parking lot. Wherever your team is when it happens.

laptop_mac
Desktop
Join Waitlist

Full reporting suite for Mac and PC. Review, approve, and export reports from your front desk, security office, or management suite.

android
Android
In Development

Android support is actively in development. Join the waitlist and be among the first operators notified at launch.

Private Beta · North America

THE WAITLIST
IS NOW
OPEN.

We are currently in limited, private deployment across North America. Access is being granted to independent and small-portfolio operators on a rolling basis.

Join the waitlist to secure your property's place in our next deployment phase. This is not enterprise software. It is built specifically for properties like yours.

No credit card. No commitment. A conversation about whether Tidemark is the right fit for your property.