An event-driven, multi-region core with read-through fare caches, idempotent booking workflows, and an API contract that’s been load-tested at 9,000 req/s.
Tokenized card storage, network segmentation, and quarterly ASV scans.
Documented controls, continuous evidence, and an annual SOC 2 Type II.
Data residency in EU and India, with DPA and SCCs available out of the box.
SAML, OIDC, SCIM provisioning, and row-level entitlements down to PCC.
POST /v1/shopping/search
{
"origin": "DEL",
"destination": "DXB",
"depart": "2026-06-12",
"passengers": { "adt": 1 },
"sources": ["GDS","NDC","LCC"]
}
200 OK · 312ms
{
"search_id": "shp_8u2j..",
"offers": [
{ "id":"of_AI9151", "src":"GDS",
"price":{"total":182,"ccy":"USD"},
"fare_basis":"Y1RT", "baggage":"23kg" }
]
}