Identify the entities
Name the real business objects the records describe.
AI HOSPITALITY ALLIANCE · WORKGROUP 4 · IMPLEMENTATION GUIDE
How to turn fragmented hotel data into identifiable, traceable, quality-controlled records that AI systems can use and people can explain.
Includes free, reusable tools for each repeatable part of the workflow.
What this guide does
Hospitality teams often use different terms for the same kind of thing. One system may say “room,” another “suite,” and another “penthouse,” while each may attach the term to a sellable category, a physical unit, or a marketing description. The goal is not to force every source system to use identical words. It is to preserve each source term while mapping it to a shared entity, meaning, and relationship so that every system can interpret it consistently.
Hospitality data is usually distributed across property-management, reservation, customer, content, distribution, revenue, service, and other systems. The same organization, property, Room Type, Room, guest, or reservation may have different identifiers and values in each system. A value can be present and still be unsafe to use because its owner, age, source, meaning, or relationship to another record is unclear.
Business data alone is not enough. A usable foundation connects business data such as organizations, properties, and products; customer data such as guests and contact points; operational data such as stays, room status, and service activity; and performance data used to understand outcomes. Entity mapping establishes what each record describes. Context alignment shows how those records relate and which functions depend on them. Together, they reduce repeated reconciliation between teams and help an agent map a user’s intent to the correct internal data and operation.
This guide gives hotel operators and technical implementers one sequence for turning those records into a reusable foundation. It answers three questions: What data must exist? Which relationships must be explicit? What must be checked before a record is used? It then provides the keys, data states, lineage fields, cleaning workflow, quality-rule types, operating measures, and reusable files needed to apply that sequence.
Entity-first sequence
Use this sequence before choosing a technical representation or exposing it for downstream use.
Name the real business objects the records describe.
Map different source terms to shared meanings while retaining the original values.
Show how the entities connect and what each connection supports.
Bring connected entities together without collapsing distinct identities or roles.
Extend the same language, keys, relationships, and controls to additional domains.
Read the numbered steps in order for a new implementation. Start with one property and the Room/Room Type example so the boundary is understandable. Preserve the exact source records, map them into a canonical shape, record evidence and trust state, apply the quality gate, and produce one current foundation record for each stable entity key. Once the result can be traced and reproduced, extend the same controls to the other six data domains.
The outcome is not a single database product or public-web vocabulary. It is a versioned operating method: each material fact can be traced to a source record; each important relationship is explicit; each current value has a state; and each promotion decision can be explained. Semantic layers, knowledge graphs, retrieval systems, structured markup, and AI applications can then consume that foundation without redefining basic identity and quality controls for every use case.
AWS describes a strong data foundation as use-case-led, connected, context-rich, owned, observable, and adaptable. In this guide, that perspective is applied through named owners, freshness expectations, known limitations, feedback routing, and product-health monitoring. It does not replace the hospitality entity model, the five record-level rule types, or the names of the three layers used here.
Define the business meaning, entity, field, and original value.
Name the source owner and the person or team responsible for conflicts.
Set the freshness expectation for the specific use.
Record known gaps, coverage limits, and unresolved dependencies.
Name the decisions, workflows, and AI uses that consume it.
Result
Every entity can be identified. Every material relationship is explicit. Every material fact carries a state and evidence that communicate how far it can be trusted.
Start with one property
Begin with one property, one Room Type, one physical Room, the source systems that describe them, and one intended use. Room is useful as the first test because it is more atomic than Guest or Reservation and exposes a common modeling error: a sellable Room Type is not the same entity as an individual physical Room.
Lineage
Lineage documents what happened to any field: which entity it belongs to, where it came from, what evidence was compared, who or what acted, when it happened, and which state resulted.
Room / Room Type
Room and Room Type are the bounded entities used to prove that the lineage, identity, relationship, state, and quality controls work together. “Lineage plus Room” means applying the evidence method to this first subject—not treating lineage as part of the Room entity.
Name the property, Room Type, Room, source systems, intended use, and owners.
Capture source keys, timestamps, original values, and known overlaps or contradictions.
Separate Property, Room Type, and Room; preserve source values while producing the canonical shape.
Compare evidence, classify each material fact, and run the quality gate.
Create the current foundation output only when the record meets the configured outcome.
Three data layers
Landed, Conformed, and Foundation keep raw evidence, record-level history, and current usable records separate. Promotion between them is controlled so that cleaning does not erase the source and every downstream use does not have to repeat identity resolution and basic quality work.
Source fidelity
Source payloads exactly as received, separated by source, with arrival time and a durable reference. Failed records and reruns remain traceable.
Canonical shape
One row per record version, shaped by entity. Original values and history remain intact; keys and relationships are resolved where possible.
Current data product
One current row per entity key, with resolved relationships, data state, lineage, and a quality-gate result. CONFLICTING and DEPRECATED records remain outside this layer.
AWS uses the common medallion terms bronze, silver, and gold. Bronze resembles Landed, and silver resembles Conformed. Gold is usually use-case-specific or aggregated; it is not the same as the Foundation defined here, which is a reusable current record designed to support multiple uses.
Define the data model
These seven domains are the minimum entity set needed to support meaningful hospitality questions across systems. They are not a complete inventory of every record a hotel may manage. Use the larger candidate workbook when a use case requires additional entities, but do not expand the model until each added entity has a purpose, owner, key, relationships, and control fields.
The wider reference inventory contains 58 internal and 40 digital entities. Its crosswalk has 21 distinct mapped digital targets and 24 structural/discovery entries, with five appearing in both lists: 21 + 24 − 5 = 40. The lists describe overlapping roles, not separate catalogues. LocationFeatureSpecification via hasAmenityFeature is a nested feature structure, not an additional catalogue entity. The five ldb: concepts are candidate extensions, not standard vocabulary. Validate them for the intended implementation.
The business role behind the hotel, such as a brand, management company, ownership group, franchisee, or independent operator. It remains distinct from the physical property.
The operating hotel, its identifiers, its relationship to one or more organizations, and the tenancy boundary for property-level facts.
The sellable Room Type and the individual physical Room, modeled separately and linked with stable identifiers.
Rate plans and codes, property and Room Type binding, amount and currency, validity dates, policy, refundability, length-of-stay limits, source, state, and lineage.
The person, modeled independently of the booker, payer, loyalty member, or reservation. A dining, spa, event, or service activity may originate a Guest record even when no stay exists.
The booking, guest, property, Room Type and assigned Room relationships, scheduled and actual dates, status, cancellation, source, state, and lineage.
Concrete operational records such as service requests, housekeeping tasks, spa appointments, event bookings, and guest communications—not one catch-all activity table.
Common record shape
Assigned key, source-scoped keys, property/organization tenancy, and external identifier crosswalks where used.
The business attributes that describe the entity, with original values retained where normalization occurs.
Source of record, data state, lineage reference, schema version, freshness class, timestamps, and quality-gate outcome.
This package contains field contracts, not sample records or an answer key. Validate it against the local technology stack before treating it as a production contract.
Download JSON ↓This is a candidate inventory, not a universal canonical model. External vocabulary and graph classifications must be checked for the intended use.
Download XLSM ↓Reference workbook. Its appendices include broader working material, and its external vocabulary, identifier, accessibility, and mapping content must be verified before normative use.
Download XLSM ↓Resolve identity and relationships
A hotel, the company that owns it, the company that manages it, and the brand it operates under are different entities. Systems often use different codes for each. The foundation therefore uses stable assigned keys for its own records and stores source-scoped or external identifiers in a crosswalk instead of treating any one external identifier as a universal master key.
A Property can be associated at the same time with an ownership group, management company, brand or franchisor, franchisee, or independent operating entity. Keep each Organization distinct and record the role it plays in relation to the Property; do not collapse these parties into one company record or assume the brand identifies the owner or operator. If the implementation uses one operating Organization as the primary tenancy link, preserve the other ownership, management, and brand associations as separate explicit relationships.
An identifier without its scheme, issuer, or source is ambiguous.
Organization and Property context travel with every key and fact.
Exact source keys and verified identifiers resolve records; name, address, or domain similarity produces a candidate for review.
Do not silently drop a value that cannot yet be mapped. Record the ambiguity and its age.
Capture at ingestion
Classify the fields
A fact about the entity, such as a Room Type occupancy limit.
A fact captured on an event, such as the rate booked on a reservation.
A reference to another entity, not a copied text value.
A calculated value with an explicit rule; do not store it as an unexplained entity fact.
A summary over records or time, kept separate from the current entity record.
Minimum relationships
Declare source precedence per attribute, not only per entity. Use the domain-owned or point-of-capture source where that is explicit, define a fallback, retain the losing values in history, and record every merge so it can be reversed. Probabilistic matching may propose a candidate; it must not silently become a resolved identity.
No listed external identifier—including DUNS, LEI, IATA, OTA, benchmarking, GDS, tax, or registry identifiers—is a universal golden key. Coverage and operational claims require current verification before adoption.
Download XLSX ↓Record trust and lineage
A value may look clean and still be old, unsupported, attached to the wrong entity, or contradicted by another source. The four data states communicate the evidence condition of the fact. The quality-gate outcome—pass, load with warning, or quarantine—communicates what the processing workflow does with the record. These are separate axes, and lineage supplies the evidence trail for actual state changes.
A domain or enum failure changes the quality-gate outcome to warning or quarantine according to severity; it does not change data_state by itself. CONFLICTING is reserved for credible source disagreement or an ambiguous record match. A record can therefore be UNVERIFIED and quarantined at the same time.
Source attribution
A fact has one declared authoritative source of record at a time.
Every fact carries both source_type and a specific source_id.
A disagreement is recorded as a conflict rather than silently resolved.
Evidence points to an independently checkable URL, document, checksum, or record.
Open-web signals are evidence to compare, not automatic truth.
Minimum lineage entry
entry_identity_typeentity_idfield_pathactionactor_typeactor_iddata_statesource_typesource_idevidence_referencecompared_toconflict_referenceoccurred_atrecorded_atschema_versionpurposeaccess_classconfidence_methodField lifecycle
guest.phoneA phone number can be captured as UNVERIFIED, become CONFLICTING when a second source supplies a different value, and later become VERIFIED after confirmation. Each transition is a new lineage event; the original values and evidence remain available.
Field lifecycle: domain failure (does not change state)
room_type.operational_statusA Room Type’s operational_status is captured from the PMS as CLOSED_FOR_RENOVATION, outside the approved enum of ACTIVE, INACTIVE, UNDER_RENOVATION, and DECOMMISSIONED. The domain rule fails and the record is quarantined with the reason “operational_status not in controlled vocabulary.” The field remains UNVERIFIED. No lineage entry is created because the state did not change; the quarantine is logged as a quality-gate event. After correction to UNDER_RENOVATION and successful validation, the normal UNVERIFIED-to-VERIFIED transition creates the lineage entry.
Clean and promote
The workflow combines source preservation, identity, state, lineage, quality rules, resolution, and promotion. It applies to a batch pipeline, an API ingestion path, or a manual reconciliation process as long as the evidence and outcomes are retained.
Determine the entity type, organization/property tenancy, source system, source record identifier, capture time, and ingestion time. A record that cannot be placed cannot be reconciled safely.
Retain the source payload exactly as received with arrival time and a durable source reference. Keep failed records and reruns traceable.
Convert values to the canonical entity shape while retaining original codes, units, locale, currency, source history, and one row per record version.
Apply key-presence, referential, domain, temporal, and plausibility rules. Also check source/evidence fields and property tenancy.
Compare authoritative and corroborating sources using declared source precedence. Record the comparison instead of silently selecting a value.
Assign VERIFIED, UNVERIFIED, CONFLICTING, or DEPRECATED from the evidence condition. Create a lineage entry when the state changes; record a rule failure that leaves state unchanged in the quality-gate log instead.
Route ambiguous matches and conflicting facts to the named owner. Retain competing values and the rule or evidence used to resolve them.
Apply the configured outcome: pass, load with warning, or quarantine. Promotion creates the current foundation record without deleting conformed history.
Expose the versioned foundation view for the defined implementation use. Never expose a conflict as settled truth.
Measure freshness, warnings, quarantine volume and age, unresolved identifiers, source changes, and recurring conflicts on a declared cadence.
Mark a superseded fact DEPRECATED and preserve its lineage. Handle any separately applicable retention or deletion decision outside this data-cleaning workflow.
The record meets the configured requirements and can be promoted.
The record remains usable for the defined purpose while the issue is recorded and counted.
The record is held back with a named owner, review cadence, reason, and age.
There is one current row per entity key; rerunning the same input is idempotent; the latest eligible record wins; and any tie is resolved by a declared rule. The conformed history remains available.
Run the Room pilot
A Room Type describes what can be sold; a Room identifies the physical unit that may later be assigned. Mixing them produces duplicate inventory, incorrect accessibility or amenity claims, and unreliable downstream answers. The pilot demonstrates the distinction and applies shared lineage and quality controls to both entities.
Sellable category
room_type_id — stable keyproperty_id — property bindingname — guest-facing canonical namecategory — required controlled room-type categoryoccupancy_max — maximum adult occupancyaccessibility_features — controlled accessibility references such as roll-in shower, hearing accessibility, visual alarm, grab bars, and lowered fixturesverification_method — required when accessibility features are presentamenities — controlled amenity references such as bed configuration, view, balcony, kitchenette, minibar, soaking tub, and fireplacemarketing_content — localized descriptions, photos, and language variantsoperational_status — current sellability statussource_of_record — authoritative source referencedata_state — current evidence conditionlineage_entries — material field-level change referencesPhysical unit
room_id — stable keyproperty_id — property bindingroom_type_id — required relationshipunit_label — internal unit labelfloor_or_zone — floor or zoneoperational_status — physical operational statusaccessibility_features — unit-level accessibility exceptions or additionsverification_method — required when accessibility features are presentsource_of_record — authoritative source referencedata_state — current evidence conditionlineage_entries — material field-level change referencesAccessibility facts
The Room and Room Type accessibility_features field references a shared dictionary rather than free text. The current enum contains WHEELCHAIR_ACCESSIBLE_ROOM, WHEELCHAIR_ACCESSIBLE_BATH, ROLL_IN_SHOWER, GRAB_BARS, LOWERED_FIXTURES, HEARING_ACCESSIBLE, and VISUAL_ALARM. Keep specific claims separate—for example, do not collapse ROLL_IN_SHOWER into the broader WHEELCHAIR_ACCESSIBLE_BATH value.
When accessibility features are present, record verification_method as SELF_REPORTED, THIRD_PARTY_AUDITED, or ADA_SURVEY_ON_FILE. The dictionary also flags SERVICE_ANIMAL_ACCOMMODATING as a proposed addition, not an approved current enum value, and distinguishes it from a general pet-friendly policy. The cited compliance references are descriptive prompts; verify the applicable local requirements before normative use.
Digital accessibility attributes
The digital AccessibilityFeature reference adds four attributes. hasCategory classifies a feature as MOBILITY, HEARING, VISION, COGNITIVE, POLICY or GOVERNANCE. VISION and COGNITIVE extend category coverage; they do not invent new approved Room/RoomType feature values. hasBookingCriticality records BLOCKING, STRONG_PREFERENCE or NICE_TO_HAVE, so booking logic can distinguish a necessary feature from a preference.
hasDimensions holds quantitative evidence for the claim. Supplied measurements are examples, not legal thresholds. hasNamespacedId identifies the feature in a named namespace so systems can link the same concept instead of deduplicating by label. The namespace example is illustrative, not a declaration of an approved standard namespace.
Use these attributes in the digital feature reference, alongside the Room/RoomType accessibility values and their conditional verification_method. They are not four additional mandatory Room/RoomType fields. The Expanded Digital Entity Schema ↓, Candidate Entity Inventory ↓ and Master Workbook ↓ contain the attribute definitions and examples.
Entity boundary
A Property amenity is not automatically a Room amenity. Room Type marketing content is not an individual Room fact. An Organization identifier does not automatically identify a Property. Preserve the entity that owns the fact and the evidence behind it.
Keep the internal foundation model separate from Schema.org. A Room Type may map descriptively to HotelRoom; an individual physical Room has no equivalent defined in this crosswalk. Physical accessibility features are represented through amenity-feature structures, and every Property should use the LodgingBusiness subtype that actually matches it rather than mapping every property to Hotel.
What to extend next
After the Room pilot, extend the same controls to Organization and Property identity and location, then to Rate/Product records needed to support availability, rate, and the canonical direct-booking link. Use the intended AI question to set the order of later domains.
The accessibility and Schema.org tabs are descriptive references. Validate applicable accessibility requirements and current Schema.org definitions before using them as normative requirements.
Download XLSX ↓Worked example
During the Room pilot, an external search can reveal a property-level fact that affects the surrounding inventory context—for example, a stated room count. This does not make the claim verified. The example below shows how discovery, entity mapping, comparison, validation, and lineage fit together.
The open-web view lists eight discovered signals for the Georgian Court Hotel. Preserve the claim, source URL or reference, time of discovery, and search context. A search result is evidence to compare—not automatically the source of truth.

The mapping view places schema:numberOfRooms = 180 on the Property record, defines the validation check, records the evidence reference, and shows the downstream usefulness of a resolved fact. If authoritative and corroborating sources agree, the fact may become VERIFIED. If credible sources disagree, it becomes CONFLICTING until the named owner resolves it.

These screenshots are explanatory illustrations. The underlying structured input records, comparison results, and expected output were not supplied, so this example is not a conformance test fixture. If those records become available, the same sequence can be packaged as a reusable pilot-results test.
Operate quality controls
A quality rule is not only a written expectation. It has a stable identifier, the entity and target fields, one of five core rule types, a declarative pass expression, severity, the action on failure, a version, and an active status. A failed rule creates a quality-gate log entry. It creates a lineage entry only when the field’s data state changes. The operating process also needs an owner, a warning and quarantine path, a review cadence, and measurements that show whether the data product remains healthy.
The identifiers needed to place the record exist.
Property identifier, entity identifier, and source identifier are present.Usually quarantineEvery reference resolves to an existing parent in the same tenancy.
The reservation property exists, and the Room Type belongs to that property.Usually quarantineControlled vocabularies are respected.
Operational status is one of the permitted values.Quarantine or warningDates and events are internally coherent.
Arrival is not after departure; an attributed activity falls within the relevant stay.Usually quarantineValues fall within a credible range rather than being merely possible.
Nights, occupancy, and rate are within the expected bounds defined for the use.Usually warningRule configuration
rule_identitytarget_fieldsrule_typepass_expressionseverityaction_on_failversionactiveRecord-level rules
The five rule types determine whether a record passes, loads with a warning, or is quarantined.
Product health
Track completeness, accuracy, timeliness, and consistency, along with missing-value spikes, anomalies, source drift, and recurring conflicts.
Ownership
Assign the owner, freshness expectation, severity, response path, quarantine review cadence, known limitation, and feedback route.
Conformance measures
Define freshness limits, warning treatment, quarantine age, review cadence, and promotion gates for the use case and operating segment. The material does not support universal numeric thresholds. The explicit exception is cross-tenancy leakage, where the acceptable target is zero.
This is a convenience format, not a replacement for the standalone downloads — if you only need one domain, the individual file will be lighter to work with.
Download XLSX ↓Implement or procure
An SMB or independent property may begin with a smaller source set and combine responsibilities. An enterprise may operate shared rules, identifiers, and conformance reporting centrally while property teams remain responsible for local source meaning and issue resolution. The scale differs; the evidence requirements do not.
Property / SMB path
Corporate / enterprise path
Technology provider / integrator
Evidence expected from every path
Maturity path
Records are source-bound and identities are not controlled.
Stable entity keys and source keys are defined.
Required relationships and identity-resolution rules are explicit.
State, lineage, survivorship, rules, warnings, and quarantine are operated.
A current, reproducible foundation output is available for the defined use.
Assess readiness
The self-assessment groups 24 operational yes/no questions around the same three requirements as the foundation: nine questions about the data and identifiers that must exist, eight about relationships and resolution rules, and seven about the quality gate and repeatable operation. Record evidence for each answer; the workbook does not create an unsupported aggregate score.
Entities and owners, controlled primary keys, tenancy binding, source-system keys, external identifiers, source references, separate capture and ingestion time, original values, and one-to-many contact points.
Organization/Property separation, Room Type/Room separation, attribute classification, derived-value rules, explicit identity rules, held ambiguous matches, reversible merges, and source precedence.
Versioned rule configuration, critical failures held back, diagnosable quarantine, named review ownership, oldest unresolved age, idempotent reprocessing, and protection from older records overwriting newer ones.
The consent-by-channel-and-type question is a separate governance handoff, not one of the 24 operational assessment requirements. Privacy and permitted-use decisions remain outside scope. Use Yes/No answers with evidence, an owner and follow-up; do not calculate a composite score.
Use the Readiness and Data Quality Workbook ↓ to answer the questions and record evidence.
Recommended implementation check
Select a small export from one property and one source system. Map its identifiers and fields, run the rules, compare expected and actual outcomes, review warnings and quarantined records, and record what changed. Repeat with a second source only after the first record can be explained from the source payload to the foundation output.
Scope and limitations
The guide supplies a data-foundation method and reusable implementation materials. It does not replace organization-specific decisions or the authoritative sources that govern a jurisdiction, vendor, property type, or technical environment.
Privacy and permitted-use decisions are outside this guide. Apply the organization’s governance, contractual, and legal processes separately.
Define operational thresholds for the actual use and segment. This guide names what to measure but does not prescribe unsupported universal numbers.
The identifier workbook is informative. Verify coverage, format, issuer, hierarchy, access, licensing, and suitability before adoption.
The accessibility and Schema.org mappings are descriptive references. Check current authoritative requirements and definitions before normative use.
The four supplied Room Type fixtures cover a clean PASS, a plausibility WARNING with state unchanged, a domain-failure QUARANTINE with state unchanged, and a genuine source conflict that becomes CONFLICTING and is QUARANTINED. These are behavioral scenarios, not complete standalone records. A runnable end-to-end package still needs complete baseline records, referenced Property data, source-observation mapping and a test runner. These have not been supplied. The eight rule conditions are specifications to implement, not an included validation engine.
The method does not require a particular cloud, PMS, database, graph store, integration product, or AI model.
Regulatory note
This standard is operational guidance, not legal advice. The European Commission states that Article 50 transparency obligations apply from August 2, 2026, and current AI-literacy obligations and enforcement timelines should be checked against official guidance for each organization. Lineage can support evidence, but it does not by itself establish legal compliance. See the European Commission Article 50 guidelines and AI literacy Q&A.
Contributors
The customer-readiness constraint that many hospitality organizations need a usable foundational data layer before advanced schemas or machine-discovery outcomes, keeping the framework practical for teams starting from that baseline.
The expanded hospitality entity inventory; internal-to-public vocabulary crosswalk; separate accessibility and amenity dictionaries; connection of business, customer, operational, and performance data; and the requirement for data that machines can interpret consistently.
The lineage-first, atomic-first sequence; Room and Room Type as the first bounded pilot; and the requirement for fully defined enums rather than field names alone.
The entity-first five-step introduction and uniform-language analogy; data-state taxonomy and criteria; source-attribution and evidence-lineage standards; the distinction between data state and quality-gate outcome; four Room Type conformance fixtures and the Room Type quality-rule configuration; the Georgian Court forensic-audit example; and prioritization of the facts with the greatest AI citation exposure.
Workgroup direction and synthesis; the shared cleaning-blueprint and dictionary objective; the operator-facing implementation sequence; and the guide and reusable-materials publication structure.
The three-layer data-foundation structure; seven-entity minimum; lineage and capture-now fields; five quality-rule types; maturity path; and 25-question readiness assessment.
The end-to-end framing from data definition through database implementation and discovery; the connection between user intent and internal operations; the accessibility dictionary and verification methods; the digital feature attributes hasCategory, hasBookingCriticality, hasDimensions and hasNamespacedId, including vision and cognitive categories; and the proposed service-animal accommodation gap.
Organization and Property identity fields; the global business-identifier reference; the DUNS-first enrichment sequence; and regional identifier considerations for cross-system entity resolution.
External resources