XCards launches zero-cloud NFC trust platform for hotels

XCards Inc. has launched its Global Trust Infrastructure, a reusable NFC hardware token designed to hold hotel access and membership credentials without cloud synchronization. The company also said it is raising a $15 million Series A as it targets hotel rollouts through HTrip and broader expansion across Asia, the Middle East and Europe.

Why it matters: - XCards is trying to replace disposable hotel keycards and cloud-dependent mobile keys with a reusable physical token that keeps guest credentials on-site. - The company is betting that privacy, offline reliability and lower plastic use will matter more as hotels face ESG pressure and stricter data rules. - The approach could affect hotel access control, loyalty, payment and other offline identity use cases if the system scales beyond hospitality.

What happened: - XCards Inc. formally launched its Global Trust Infrastructure, or GTI, on Aug. 23, 2026. - The system anchors hotel membership and access credentials in a reusable NFC hardware token. - XCards also launched a $15 million Series A round at a $75 million pre-money valuation. - Chairman and Chief Scientist Frank Zheng, CEO Bo Tang and CTO Kevin Wang are leading the company. - The company is based in San Jose, California. - More information is available in XCards' announcement.

The details: - GTI uses five layers: a secure NFC chip, an offline local credential store, a privacy vault on hotel servers, a future payment partition and an orchestration API. - The hardware root uses an NXP MIFARE DESFire EV2/EV3 secure element with an estimated bill of materials below $3. - The chip is EAL6+ certified and compliant with ISO 14443-A. - The card separates door access keys from membership entitlements through multi-partition memory. - Hotel property management systems write encrypted, time-bound credentials to the card at check-in. - Guests can use the card to open doors, enter gyms or redeem vouchers without an internet connection or smartphone app. - The Privacy Vault keeps data on the hotel’s local servers, and the card contains no PII. - Biometric data, if used for VIP check-in, and personally identifiable information are not transmitted to XCards’ U.S. servers. - XCards says the architecture is designed to support GDPR, China’s PIPL and California’s CCPA requirements. - The secure element also includes a partition for future EMV payment applets. - XCards has pre-built connectors for HTrip middleware and an API for integration with hotel PMS and lock-management software. - Hotels can revoke a lost card from the front desk terminal.

Between the lines: - The launch is aimed at a real operational pain point: mobile keys still fail when phones die, apps do not work cleanly across devices or guests simply prefer cards. - XCards is positioning zero-cloud data handling as a sales advantage, not just a compliance feature. - The company is also signaling that the NFC token can become a broader identity and payments layer, not only a hotel key replacement. - The HTrip relationship gives XCards a distribution path into a large existing hotel network instead of a fragmented direct-sales market.

What's next: - XCards plans to deploy to 800 high-traffic business hotels in the HTrip network in Q3 2026. - The company expects to scale to 5,000 properties from Q4 2026 through Q2 2027. - XCards plans to introduce a “Value Stay” membership tier during that expansion phase. - The company is targeting 12,000 properties by the end of 2028 across China, Southeast Asia, the Middle East and eventually Europe. - XCards says the $15 million Series A will fund R&D, channel operations and inventory for an initial run of 2 million cards. - The company is targeting EBITDA positivity by Q4 2027.

The bottom line: - XCards is selling hotels on a physical, offline and privacy-first alternative to cloud-based digital keys, with a business model built to convert card usage into recurring membership and transaction revenue.