Hostaway voice-AI plugin
encrypted SIP + SRTP per property
Every guest call is answered by an AI receptionist that knows the property, the check-in time, the Wi-Fi password and the active reservation. End-to-end encrypted — SIP-over-TLS signalling, SRTP audio. EU-sovereign, hosted in Malta. Installs in under 10 minutes. BYOC + BYOG: bring your own SIP carrier and your own Google Gemini API key; keep control of both cost drivers on your own accounts.
SIP-TLS + SRTP, every hop
Call signalling runs over SIP-over-TLS (RFC 5630). Audio runs over SRTP with SDES key exchange (RFC 4568, AES-CM-128 / HMAC-SHA1-80). No cleartext SIP. No cleartext RTP. Mandatory, not optional. More on SIPS →
Malta-hosted, GDPR-native
Data does not leave EU jurisdiction. No lock-in with US AI vendors. Operator chooses where transcripts + recordings land. Compliant with NIS2 / DORA / CRA regimes.
EN / DE / FR / ES / IT
English, German, French, Spanish, Italian — ready out of the box. The AI agent detects the guest's language automatically; no per-language configuration required.
Paste API key, done
One-click install via the plugin admin: paste Hostaway account ID + API key, link properties to virtual numbers. Default prompts are generated from property metadata; no per-property scripting needed.
"Call us" button on your booking page
Drop a one-line snippet on your direct-booking page. Guest clicks → WebRTC call from the browser straight to your AI receptionist (or to you). No dial pad, no phone number to type, no PSTN cost to the guest. Mobile-first bookings convert better. How-to →
How BYOC + BYOG works
The plugin ships as BYOC + BYOG — Bring Your Own Carrier & Bring Your Own Gemini Key. You keep sovereignty over the two main cost drivers (telco minutes + AI minutes) on your own accounts; CodeB charges only for plugin orchestration + the encrypted SBC.
What you bring
- Your own SIP trunk (Sipgate, Deutsche Telekom, Vodafone, in-house PBX, FRITZ!Box, etc.) configured in your tenant. The plugin uses it. Your existing trunk numbers become per-property DIDs — no number purchase, no porting.
- Your own Google Gemini API key (pasted once in tenant settings). The plugin uses your key for the AI voice agent. Google bills you directly. CodeB does not proxy any AI traffic.
- Your Hostaway account (account ID + API key, validated at install time).
What CodeB charges for
- Plugin licence (per property, per month) — orchestrates reservation context, prompt overlay, webhook ingest, 24h-before-arrival scheduler.
- Encrypted SIP-over-TLS + SRTP signalling on the CodeB Sovereign SBC.
- Recording, transcripts, admin UI, audit log.
What stays with you
- PSTN minutes (billed by your carrier on your existing bill).
- AI minutes (billed by Google against the Gemini key you provided).
- Reservation data — never copied out of your Hostaway account beyond what the AI agent needs during a conversation.
How it works
Install + connect Hostaway
Open plugin admin, paste Hostaway account ID + API key. The plugin validates credentials, registers webhooks, pulls your properties.
Link each property to a virtual number
Each Hostaway property is linked to a CodeB virtual number (extension or DID). Default prompts are generated from property metadata: name, address, check-in time, Wi-Fi, house rules.
Guest calls → AI answers with live context
When a guest calls the property number, the AI agent receives an up-to-date system-prompt overlay: which property, who is arriving today, what the door code is, what the Wi-Fi password is.
(Optional) 24h-before-arrival outbound calls
On every new webhook-received reservation the plugin schedules an outbound AI call 24 hours before arrival: check-in instructions, ETA confirmation, special requests.
Escalation to the host
Warm-transfer to the host's mobile or the maintenance team on intent classification. Transcripts can be posted back into the Hostaway inbox as a message.
FAQ
- Why does encryption matter for a vacation-rental phone line?
- Guest calls contain reservation IDs, door codes, sometimes the last four digits of a credit card. Cleartext SIP and cleartext RTP can be intercepted on any path between caller and PBX. CodeB encrypts signalling (SIP-TLS, RFC 5630) and audio (SRTP via SDES, RFC 4568). Mandatory on every hop between the guest network, the SBC, and the registered desk phone.
- What does BYOC + BYOG mean for me?
- BYOC = "Bring Your Own Carrier" + BYOG = "Bring Your Own Gemini Key". You keep control of telco minutes (your carrier bill) and AI minutes (your Google bill) on your own accounts. CodeB charges only for the plugin licence + the encrypted SBC. Most operators already have a SIP trunk and a Google account; setup is paste-your-keys.
- Which languages does the AI support?
- English, German, French, Spanish, Italian. The agent detects the guest's language from the opening line and switches automatically.
- What happens during the 30-day trial?
- The first 30 days after install are fully functional, with no licence gate. You can set up properties, take real calls, exercise the full plugin.
- Where are recordings and transcripts stored?
- In your tenant's Malta-hosted storage. You control retention. Recordings can be disabled per property. Transcripts are the primary artefact for auditability; audio is optional.