Hostaway voice-AI plugin
encrypted SIP + SRTP per property
Every guest call answered by an AI receptionist that knows the property, the check-in time, the WiFi password, and the active reservation. End-to-end encrypted — SIP-over-TLS signalling, SRTP-encrypted audio. EU-sovereign. Sub-10-minute install. BYOC + BYOG: you bring your own SIP trunk and your own Gemini API key; CodeB charges only the plugin licence.
SIP-TLS + SRTP, every leg
Guest call signalling rides SIP-over-TLS (RFC 5630). Audio rides SRTP with SDES key exchange (RFC 4568, AES-CM-128 / HMAC-SHA1-80). No plaintext SIP on the wire. No plaintext audio. Mandatory, not optional. More on SIPS →
Malta-hosted, GDPR-clean
Data never leaves EU jurisdiction. No US-based AI vendor lock-in. Operator chooses where transcripts + recordings land. Aligns with NIS2 / DORA / CRA baselines.
EN / DE / FR / ES / IT
English, German, French, Spanish, Italian — out of the box. The AI agent matches the guest's language automatically; no per-language setup.
Paste API key, done
One-click install from the plugin admin: paste Hostaway Account ID + API key, link listings to vnums. Default prompts seeded from listing metadata; no per-property scripting required.
"Call us" button on your booking site
Drop a one-line snippet on your direct-booking page. Guests click → WebRTC call from their browser to your AI receptionist (or you). No dialer, no phone number to type, no PSTN cost on the guest side. Mobile-first booking flows convert better. See how →
How BYOC + BYOG works
The plugin ships as BYOC + BYOG — Bring Your Own Carrier & Bring Your Own Gemini Key. You keep ownership of the two main cost drivers (telco minutes + AI minutes) on your own existing accounts; CodeB charges only for the plugin orchestration layer + encrypted SBC.
What you bring
- Your own SIP trunk (Sipgate, Voipfone, BT, Vonage Business, your own PBX, FRITZ!Box, etc.) configured in your tenant. The plugin uses it. Your existing trunk numbers become the per-property DIDs — no new number purchase, no porting.
- Your own Google Gemini API key (configured once in tenant settings). The plugin uses your key for the AI voice agent. Google bills you directly. CodeB never proxies your AI traffic.
- Your Hostaway account (Account ID + API key, validated at install).
What CodeB charges for
- Plugin licence (per property per month) — orchestrates reservation context, prompt overlay, webhook ingest, 24h-pre-arrival scheduler.
- Encrypted SIP-over-TLS + SRTP signalling termination on the CodeB sovereign SBC.
- Recording, transcripts, admin UI, audit log.
What you keep ownership of
- PSTN minutes (billed by your carrier on your existing invoice).
- AI minutes (billed by Google for the Gemini key you provided).
- Reservation data — never copied out of your Hostaway account except for what the AI agent needs in-call.
How it works
Install + connect Hostaway
Open the plugin admin on your tenant. Paste your Hostaway Account ID + API key (issued from dashboard.hostaway.com). The plugin validates the credentials, registers webhooks, and pulls your listings.
Link each listing to a virtual number (vnum)
Each Hostaway listing gets bound to one CodeB vnum (extension or DID). Default prompts come from listing metadata: name, address, check-in time, WiFi, house rules. You can override per-listing.
Guest calls → AI answers with live context
When a guest dials the property number, the AI agent receives a live system-prompt overlay: which property, who's arriving today, what the door code is, what the WiFi password is. It handles "what time is check-in", "the AC isn't working", "where do I park" without escalation.
(Optional) Outbound 24h-pre-arrival calls
When a new reservation is webhooked in, the plugin schedules an outbound AI call 24 hours before arrival: check-in instructions, ETA, any special requests. Per-tenant toggle.
Escalation to host (when needed)
Warm transfer to host's mobile or maintenance team on intent classification. Transcripts can be posted back into the Hostaway unified inbox as a message.
Example calls the AI handles unaided
FAQ
- Why does encryption matter for a vacation-rental phone line?
- Guest calls contain reservation IDs, door codes, sometimes payment-card-last-4. Unencrypted SIP and unencrypted RTP are eavesdroppable on any path between caller and PBX. CodeB encrypts both signalling (SIP-TLS, RFC 5630) and audio (SRTP via SDES key exchange, RFC 4568). Mandatory, not optional, on every leg between the guest's network, the SBC, and any registered hardphone.
- What does BYOC + BYOG mean for me?
- BYOC = "Bring Your Own Carrier" + BYOG = "Bring Your Own Gemini key". You keep control of telco minutes (your carrier invoice) and AI minutes (your Google invoice) on your own accounts. CodeB charges only the plugin licence + encrypted SBC. Most operators already have both a SIP trunk and a Google account; setup is paste-the-keys.
- What does "EU-sovereign" actually mean?
- The bridge runs on EU hardware in EU data centres. Recordings + transcripts land on disks under EU jurisdiction. No US-based call routing. We use a single AI vendor for the voice agent (Google Gemini Live) under DPA terms that align with EU GDPR; transcripts are not used for vendor training.
- Which languages does the AI handle?
- English, German, French, Spanish, Italian. The agent detects the guest's language on the opening line and switches automatically; no per-language prompt setup required.
- How do I trigger an outbound AI call from my own backend?
- POST one JSON body to the public scheduling endpoint — see schedule-ai-call.html. The endpoint is OAuth-secured (per-tenant API key); you get back a call ID and a webhook when the call ends with the transcript.
- What happens during the 30-day grace period?
- The first 30 days after install are fully featured, no billing gate. You can set up listings, run real calls, exercise the full plugin. After day 30, the licence gate activates per your subscription.