01
FIG 01 · Travel App Development
Travel apps that start with the supply you can actually sell
Booking engines, OTA and B2B portals, tour-operator apps and trip companions, built on the flight, hotel and activity supply you can access, with checkout designed for PCI DSS v4.0.1.
See how it works
FIG 02 · Quick answer
What does a travel app development company do?
Elgrith is a travel app development company building booking engines, OTA and B2B portals, tour-operator apps and trip companions. We start with distribution: IATA NDC, GDS and aggregator APIs such as Duffel, Expedia Rapid or Booking.com’s Demand API, and the access each requires. Then we build checkout designed for PCI DSS v4.0.1, multi-currency booking and Apple and Google Wallet passes.
- Flights, stays and activities planned before screens
- Supply first
- Projects delivered since 2015
- 1,000+
- Clients across the USA, UK and India
- 250+
- Your code, repository and IP
- 100%
FIG 03 · Why it matters
Supply, standards and payments decide a travel app before design.
From the PCI Security Standards Council, IATA and Booking.com’s developer portal, read on 23 Oct 2026.
01
51
Future-dated PCI DSS requirements
PCI SSC: of the 64 new requirements in PCI DSS v4.x, “51 of them are future-dated”, effective 31 March 2025, including 6.4.3 and 11.6.1 on scripts in the payment page.
Source: PCI SSC blog, e-commerce requirements after 31 March 2025 (26 Mar 2025)(opens in a new tab)02
NDC
An open standard for airline offers
IATA describes NDC as “a new, XML-based data transmission standard” that is “open to any third party, intermediary, IT provider or non-IATA member”.
Source: IATA, NDC developer portal (read 23 Oct 2026)(opens in a new tab)03
v3.3
Hotel supply has its own versions
Booking.com’s Demand API lists “Version 3.3 (latest)”, with flights marked “Coming soon”. Each supplier sets its own access, versions and partner terms.
Source: Booking.com, Demand API (read 23 Oct 2026)(opens in a new tab)
FIG 04 · Supply
Getting supply in 2026
A travel app is only as good as what it can sell. These are the main sources of supply, with what each gives you and what access it needs, checked on 23 Oct 2026.
| Source | What it gives you | What access it needs |
|---|---|---|
| GDS (Amadeus, Sabre, Travelport) | Flights, hotels and cars from many suppliers through one connection | Commercial agreement with the GDS; ticketing usually needs accreditation or a consolidator |
| Airline NDC APIs | Airline offers with fares, bundles and ancillaries | IATA’s NDC standard is open to third parties; each airline sets its own access |
| Flight aggregators (such as Duffel) | Many airlines, including NDC content, through one modern API | Sign-up and commercial terms with the aggregator |
| Hotel and stays APIs (Expedia Rapid, Booking.com Demand API) | Hotel and lodging inventory, rates and booking | Partner or affiliate approval with each supplier; Booking.com lists Demand API v3.3 as latest |
| Direct contracts | Tours, activities, transfers and your own inventory | Your contracts, loaded through an extranet or supplier API |
Self-service developer programmes and partner terms change; we confirm each supplier’s current access before scoping. We hold no partner status, accreditation or reseller agreement with any GDS, airline, aggregator or hotel supplier.
Connecting supplier APIs? API integrationFIG 05 · What you get
Travel apps and platforms we build
Travel software development company services for startups, tour operators, TMCs and OTAs, on iOS, Android and web, with one back end for search, booking and service.

02
OTA and B2B travel portals
03
Tour and activity apps
04
Corporate travel tools
05
Trip companions
06
Dynamic packaging
07
Multi-currency booking
08
Admin and supplier management
Deliverables
11
deliverables, in writing
FIG 06 · Access
Access before code
Who is allowed to sell what decides the architecture. We build for the access you have or arrange; Elgrith itself holds no IATA or ARC accreditation and sells no travel.
IATA or ARC accreditation
- What it is
- Accreditation that lets an agency issue airline tickets directly (IATA in most markets, ARC in the US)
- For the app
- Direct ticketing and settlement flows
Consolidator or host agency
- What it is
- An accredited partner that tickets on your behalf
- For the app
- Bookings passed to the partner for ticketing
Aggregator account
- What it is
- A flight or hotel aggregator that handles supplier connections and, in some models, ticketing
- For the app
- One API to integrate, with the aggregator’s terms
Merchant of record
- What it is
- Who charges the traveller’s card: you or the supplier
- For the app
- Decides payments, refunds, chargebacks and PCI scope
FIG 07 · Payments
Payments that pass audit
PCI DSS v4.0.1 is the current standard. The PCI Security Standards Council says 51 future-dated requirements took effect on 31 March 2025, including 6.4.3 and 11.6.1 on scripts running in the payment page. We design to keep your scope small; your acquirer or QSA confirms compliance.
06principles
Tokenized card capture
Hosted fields or a hosted payment page from your provider, so card numbers don’t touch your servers.
Payment-page scripts (6.4.3, 11.6.1)
An inventory of every script on the payment page, with authorization and change detection designed in.
3-D Secure and SCA
Strong customer authentication where cards and markets require it, with fallbacks that don’t lose the booking.
Refunds and changes
Cancellations, partial refunds and fare differences reconciled with each supplier.
Payment gateway integration
Stripe, PayPal, Razorpay and others, set up and tested.
Payment gateway integration
FIG 08 · EU packages
Selling packages in Europe
The revised Package Travel Directive, Directive (EU) 2026/1024, entered into force on 28 May 2026. EU countries have 28 months to transpose it, with full application expected from 2029 (EU Transition Pathways for Tourism, 22 Jul 2026). General guidance, not legal advice.
04principles
Complaints flow
The revised directive asks organisers to acknowledge complaints within seven days and reply in full within sixty; we build the inbox, timers and audit trail.
Package or separate booking
Each booking flagged as a package or not, so the right information, terms and protection apply.
Pre-contract information
The information travellers must see before they book, kept as versioned content your legal team controls.
Built to change
Rules held in configuration, so national transposition details can be added without a rebuild.
FIG 09 · In trip
The trip after booking
Most travel apps stop at the confirmation email. The trip is where loyalty is won or lost.
04principles
Apple Wallet and Google Wallet
Boarding passes, tickets and booking passes through Apple PassKit and the Google Wallet API, updated when plans change.
Offline itineraries
Bookings, documents, maps and directions saved on the device for flights and roaming.
Disruption alerts
Delays, gate changes and cancellations pushed with the next step, not just the bad news.
Self-service changes
Change, cancel or add extras in the app, within each supplier’s rules.
FIG 10 · AI
AI in travel apps
AI helps travellers plan and get help, as long as prices and availability always come from live supplier data, never from the model.
03principles
Trip planning
Itinerary ideas from a traveller’s dates, budget and interests, turned into real, bookable options.
Concierge and support
Answers about bookings, baggage and policies from your own content, with hand-off to a person.
Disruption handling
Rebooking options suggested when plans break, confirmed by the traveller or an agent before anything changes.
AI agent development
FIG 11 · Plan
Planning the build
Pages that help you choose the first release and the technology.
03principles
Starting with one product?
One supplier, one market and the core booking flow, launched first.
MVP developmentOne codebase for iOS and Android?
Cross-platform travel apps with offline storage and wallet passes.
Flutter app development
FIG 12 · Process · 6 steps
Secure the supply, then build
A free call, a fixed written quote, then sprints with weekly demos, starting from the supply and payment model you can actually use. You own the code and IP.
- Step 01
Free call
Tell us what you want to sell, to whom and where. We ask about supply, access, payments and margins, not just screens.
- Step 02
Supply and access review
Which suppliers, aggregators or GDSs fit, what access each needs, and who is merchant of record.
- Step 03
Fixed written quote
A written scope and a fixed quote, with what each release delivers, before any work starts.
- Step 04
Sprints with weekly demos
Design and build in sprints, with a demo every week against supplier test environments.
- Step 05
Certification and launch
Supplier certification steps where required, App Store and Google Play release and web launch.
- Step 06
Support and change
Supplier API changes, new suppliers and features, covered under terms agreed in your written scope.
FIG 13 · What you get
Everything included
Written into your fixed quote, so you know exactly what you are paying for before work starts.
11items
- Written scope and fixed quote
- Supply and access plan
- UX and UI design
- Booking engine and back end
- iOS and Android apps or web portal
- Supplier and aggregator integrations
- Payment flow designed for PCI DSS v4.0.1
- Apple Wallet and Google Wallet passes if in scope
- Admin panel for bookings, markups and content
- App Store and Google Play submission
- IP assignment: code and data are yours
FIG 14 · Tech & tools
The tools behind the work
Proven, well-supported tools, chosen for your project and set up in accounts your business owns.
- Next.js
- React Native
- Flutter
- Swift
- Kotlin
- Node.js
- Python
- PostgreSQL
- Redis
- Elasticsearch
- IATA NDC
- Duffel API
- Expedia Rapid API
- Booking.com Demand API
- Apple PassKit
- Google Wallet API
- Stripe
- 3-D Secure
FIG 15 · Who it’s for
Travel apps for startups, tour operators and agencies.
A platform you own, built on the supply you can sell and the payment model you choose.
3 audiences
Travel startups
A new travel product on supply you can actually get.
Booking apps, trip planners and niche OTAs, starting with an aggregator or direct contracts so launch isn’t blocked by access you don’t yet have.
- Aggregator-first supply
- MVP in one market
- Wallet passes
- Code you own
Tour operators
Your departures, booked and run in one place.
Tour booking, capacity, guides, check-in and traveller apps, with package rules and complaints flows for European sales.
- Departures and capacity
- Guide and check-in apps
- Package Travel Directive flows
- Multi-currency
TMCs and OTAs
Portals and tools on top of your GDS and NDC content.
B2B portals, corporate booking tools and mid-office features on the supply agreements you already hold.
- B2B and agent portals
- Policy and approvals
- Markups and credit limits
- Reporting
FIG 16 · Working with us from the USA and UK
Built in New Delhi. Run on your hours.
Every project gets a point of contact in New York or London and an engineering team in New Delhi. Here is how today’s working days line up, live.
New York
North America
--:--ET
New Delhi team Your working day- Shared working time
- ≈ 3 hours today
- New Delhi is
- 10.5 h ahead
- Live calls, your time
- 9 a.m. to 12 p.m. ET
London
UK & Europe
--:--UK
New Delhi team Your working day- Shared working time
- ≈ 4.5 hours today
- New Delhi is
- 5.5 h ahead
- Live calls, your time
- 9 a.m. to 1:30 p.m. UK
Three ways to work together
- 01
Fixed-scope project
A written scope, one fixed price and a dated plan. Suits websites, apps and MVPs.
- 02
Dedicated team
Designers and engineers on your roadmap every month, billed monthly.
- 03
White label
For US and UK agencies: our work, your brand, unbranded deliverables.
Every engagement
- Fixed quote in USD, GBP or INR after a free 30-minute call
- NDA before discovery. You own all code, designs and content
- A working demo every sprint, not status slides
- Reply within one business day, calls inside your hours
Calls on ET or UK hours
FIG 17 · Money flow
Agency model vs merchant model in a travel app
Whether you sell as an agent or as the merchant changes payments, refunds and risk. We decide this with you before design.
| Agency model | Merchant model | |
|---|---|---|
| Who charges the card | Usually the supplier | You |
| How you earn | Commission or booking fee | Margin between your price and the supplier’s net rate |
| Refunds and chargebacks | Mostly the supplier’s process | Yours to handle and fund |
| PCI scope | Smaller | Larger, so tokenization and hosted fields matter more |
Many platforms mix both, by product or supplier. The choice affects your contracts, so confirm it with your suppliers and advisers.
Taking payments? Payment gateway integrationFAQ
Frequently asked questions
Straight answers about Travel App Development with Elgrith.
We don’t publish prices, because cost depends on the supply integrations, the payment model, which apps and portals you need and how much content you manage. Supplier and aggregator fees are separate. After a free call you get a written scope and a fixed quote.
FIG 18 · Related
Keep exploring
App Development
iOS, Android & cross-platformWeb App Development
Portals, dashboards & internal toolsPayment Gateway Integration
Stripe, PayPal, Razorpay & moreAPI Integration
Connect your apps, CRM & paymentsAI Agent Development
Custom agents, MCP servers and guardrailsFlutter App Development
One codebase for iOS & AndroidMVP Development
Web, mobile and AI MVPs you ownOn-Demand App Development
Delivery, booking & ride-hailing apps
Free 30-minute call
Build a travel app on supply you can actually sell.
Tell us what you want to sell, to whom and where. After a free call you get a written scope and a fixed quote.
Pick a day for your call
OpenPick a day. You'll choose a time in your own time zone on the next step.







