Case study
Three platforms, one transformation mandate
Boudl Hospitality Group set out to digitise how it sells, signs and operates. This is the engagement behind it — the team, the platforms, and the security controls that shipped with them.
- Role
- Digital Transformation & Information Security Advisor to the CEO
- Period
- 2024 – present
- Team
- 10 engineers, built and led
- Scope
- Architecture, delivery, operations, security
The mandate
I joined Boudl Hospitality Group as Digital Transformation & Information Security Advisor to the CEO, working directly to the CEO's own transformation plan. The brief covered both halves of the same problem: what the group builds, and whether it can be trusted to run.
Building the delivery team
The work needed a delivery organisation rather than a vendor. I built and led a team of ten engineers and kept it with the platforms through design, build and operations, so architecture decisions and delivery decisions stayed in the same hands.
Three platforms
The team delivered three platforms covering the group's guest, contractual and operational surfaces — Boudl App, Boudl Sign and Boudl PMS. Each is described below by what it does.
Security in the delivery path
NCA ECC controls were treated as architecture, not as an audit exercise. Controls were mapped into how the platforms are designed, how the team ships, and how the systems are operated — so security is a property of the build rather than a remediation project after it.
Advising the CEO
Alongside delivery I briefed the CEO on cyber and technical risk, so that the group's decisions were taken with the risk picture on the table rather than after the fact.
What was delivered
Boudl App
Guest-facing mobile application
The guest's own entry point to the group's properties — the mobile surface through which a stay is found, booked and managed.
Boudl Sign
Digital signature platform
Agreements and operational paperwork moved onto a controlled digital signing flow instead of being handled by hand.
Boudl PMS
Property management system
The operational core behind the front desk: the system of record for properties, inventory and daily hotel operations.
Where the advisory work landed
Access control — who can reach which systems and data, decided with the trade-offs made explicit.
Data protection — how guest and operational data is held and handled across the three platforms.
Digitisation decisions — which processes move onto a platform, and what has to be true before they do.
The visuals on this page are stylized representations of each platform's function, not product screenshots. Detailed metrics, timelines and product imagery belong to the client and are not published here.
Work of this shape
Get in touch