Hospitality software

Software for the whole hotel.

Aerandil builds the systems a property runs on, from the front desk to the restaurant to the bill, all on one governed record of the operation. Ithaca, our property management system, is the first.

A hotel reception desk
No customer logos yet.The product is on this page, live.A few design partners run it with us first.
What a hotel gets backMeasured on our own build

Fewer systems, fewer fees, and a record that always adds up.

No customer figures yet; these are the product's own rules and our own measurements. The first design partners' numbers go here when they exist.

Use casesSix days at a hotel

What it does on an ordinary day.

The problemWhy a model

Hotels run on systems. Operators run between them.

A property runs a PMS, a point of sale, a channel manager, a payment terminal, a housekeeping sheet and a spreadsheet for whatever is left. Each one invents its own guest, its own room and its own bill. The desk re-keys between them, and the record of what happened lives nowhere.

The old modelEvery application rebuilds the hotel. Business rules drift into screens, scripts and spreadsheets, and no two systems agree on who is in room 108.
The Aerandil modelModel the operation once. A reservation is a typed object connected to a person, a property, a room type, a rate plan, inventory, a stay and a folio, with rules governing how it can change.
The productsBuilt on the same model

Forge is the platform. Ithaca runs the desk. The rest is built the same way.

Who it is forOne model, every kind of house

Built for the properties a desk actually runs.

Launching firstProperty management · early access

Ithaca runs the desk.

Arrivals, departures, housekeeping from a phone, the money in both directions, and a night audit that says what is in the way. Built one screen at a time, against a hotel with guests in it.

A minute at the front deskRecorded on Ithaca itself. The guests are made up; every click is the real product.

Demonstrable today, with its first hotels; not yet generally available.

The model, in numbers
218Object types
509Link types
524Actions
44Domains
3,064API operations

Counted from the registry, not the brochure. Regenerated with every schema change.

Under every screenForge, the platform

One model under every screen.

Ithaca has no private door. Every board writes through the same typed, permissioned, validated actions the platform exposes to any integrator, SDK or agent. The audit trail is not a feature of the product. It is the only way anything gets written.

Aerandil Explorer — the reservation ledger of a live property, with the object catalogue on the left and the live event feed on the rightAerandil Explorer — the reservation ledger of a live property, with the object catalogue on the left and the live event feed on the right

Explorer, the platform's console: every object, link, action and event in the ontology, live.

Typed operationsObjects, links, actions and functions carry declared contracts. The model is executable, not a diagram.
Governed changeEvery mutation is permissioned, validated, idempotent, and recorded as an immutable event.
Open foundationsVanilla Postgres, OpenAPI, JSON Schema, MCP and generated SDKs. Nothing here needs us to stay portable.

The ontology, the engine, the contracts. Forge ->

IngestionSource systems → one model

Your PMS doesn't have to know we exist.

A design partner does not start by switching systems. Connectors read what the property already runs, and the model fills from the record as it stands.

01ExtractConnectors pull from the systems you already run — PMS, POS, workforce, procurement — on their own schedules.
02Land verbatimEvery vendor record is staged raw, exactly as it arrived. Nothing is dropped or coerced at the door.
03Fold through actionsVersioned mappings replay each record through the same governed actions as every operator — validated, idempotent, audited.

Every sync run is an audited object in the same ontology it feeds. How ingestion works ->

Design principle

AI acts through the same rules as everyone else.

An agent's tools are ontology operations: typed, permissioned, validated, audited. When confidence is low or the stakes are high, the agent proposes and a person confirms.

# a governed action — not raw database access
POST /v1/actions/apply → validate → event
# one path: the desk, an integrator, an agent

Our flagship agent lives by these rules. Meet Talos ->

The Explorer approvals inbox — agent-proposed actions awaiting human confirmationThe Explorer approvals inbox — agent-proposed actions awaiting human confirmation
Questions

What a first call asks.

Answers checkable in the product or the docs. The rest is a conversation.

What is Aerandil?

One governed model of a hotel's operation: the guests, rooms, bookings, bills, staff and suppliers, and every change to them, made through a typed, permissioned action and kept on an append-only record. Our products are built on it. Your own systems connect to it through the same contracts.

What is Ithaca?

Our property management system: the front desk from arrivals to the night audit, a phone app for housekeeping and maintenance, and payments on the same bill as the stay. It is in early access with its first hotels, demonstrable today and not yet generally available.

How do we become a design partner?

Apply on the design partner page. You get three times for a fifteen-minute call straight away; after it we shadow your property from your current system, you run a private demo on your own data, and go-live is rehearsed before the night. The first three months are at cost.

Do we have to replace our PMS to start?

No. Connectors read what the property already runs and the model fills from the record as it stands. Switching is a later decision, and when a hotel makes it we rehearse the cutover against its own data before the day.

How does AI fit in?

An agent's tools are the same actions the desk uses, with the same permissions, validation and audit. Where the stakes are high or the confidence is low, the agent proposes and a person confirms. Nothing is written any other way.

Where does our data live?

In vanilla Postgres, portable to any host. With Proxima it runs in a single-tenant cell of your own, in the region and jurisdiction you choose, with residency enforced by the model rather than by policy.

What does it cost?

Ithaca is priced per room per month, with no setup fee. The figure is agreed with design partners during early access and published at general availability.

Forward deployed

Building the operational foundation hospitality is missing.

Aerandil is in private development. The first hotels run Ithaca with us on site, as design partners, and their day shapes what the model learns next. A private demo is where that starts: we set up a hotel shaped like yours and work the day with you, live.

Book a private demo

Private demos run live, over a video call. Design partners are chosen from them.