Members, measured.
Every action on the platform is one audited transaction.
Legal text is versioned and immutable, held in two languages, recorded with the method of consent, the language it was given in, and whether the member reached the end. Most systems record a click.
Each club is its own database with its own credentials, in a jurisdiction you choose. No other club’s data is in it.
Staff carry PINs and no logins. They are still reached.
Membership, finance, the portal, events and guests, rota, kiosks, reporting. Enabled as needed.
Status
In development. One club live.
Member Intelligence
Member Intelligence scores preference over time and proposes a seat, a pour, an introduction. Staff confirm or reject. The system proposes; people decide.
159 preference records. Three members. The scale has never been tested for monotonicity.
Testing it needs more members scored than we have. Until then a rehearsal runs — predictions sealed before service, outcomes recorded after — to prove the floor team can do it at all. The test itself asks whether a score of 4 is accepted more often than a score of 2. If it is not, the model is revised before a second club sees it. We will publish the figure either way.
The kiosk
Kiosks are built on the assumption that the device will be stolen.
Each tablet is enrolled with a token that is revoked from the admin. Member sessions are opaque and exchange server-side for credentials that live sixty seconds. Staff identity is a signed PIN.
A tablet that leaves the room grants its new owner nothing. Most hospitality tablets hold a long-lived credential on the device.
Card tap, guest sign-in, stocktake, room orders. A display board when idle.
Early access
Taking early-access conversations now.