Skip to content

Security

Your event's data, kept in its lane.

Event data is personal: names, emails, who sat where, who brought whom. Here is how Event Tech keeps it separated, encrypted on the wire, deletable, and visible only to the people who need it.

We're in early access, so this page describes how the platform is designed and run today. Before general availability we'll publish a fuller security overview, including our sub-processors.

Tenancy

Every organization is its own tenant and every event lives inside one. Each request is checked against the tenant and event it belongs to, so attendees of one event never see data from another, even inside the same app.

  • Organization and event scoping on every request
  • Event codes join an event; they do not grant console access
  • Staff access ends when the event does, unless you extend it

Encryption in transit

The app, the console, every event website and the API are served over HTTPS only. We use modern TLS and HTTP Strict Transport Security on our domains, and nothing is served over plain HTTP.

  • HTTPS only, everywhere
  • HSTS on Event Tech domains
  • No mixed content on event websites

Data deletion

Your event data belongs to you. Export it whenever you like, and when you delete an event its attendee data is deleted with it. Attendees can ask us to delete their data and we will.

  • Export before you delete
  • Event deletion removes attendee data
  • Attendee deletion requests honored

Roles

Not everyone needs the keys. Give the door team scanning and nothing else, give the producer the guest list, give finance the export. Roles are per organization and per event.

  • Owner, Admin, Editor, Staff and Viewer
  • Door-only access for check-in staff
  • Per-event role assignments

Roles

Who can do what.

Five roles, assigned per organization and per event. The door team gets the scanner, not the guest list export.

Capability OwnerAdminEditorStaffViewer
Billing, organization settings, delete the organization Yes No No No No
Create events, invite organizers, assign roles Yes Yes No No No
Edit agenda, people, program, branding Yes Yes Yes No No
Manage guest lists, comps and plus-ones Yes Yes Yes No No
Send announcements Yes Yes Yes No No
Scan tickets and check people in Yes Yes Yes Yes No
See reports and exports Yes Yes Yes No Yes

These marketing sites

event-tech.llc, kickoff.events and events.theater carry no third-party trackers, ad pixels or cookies. If analytics are switched on, it's Cloudflare Web Analytics, which is cookieless. The early-access form sends what you type to our own API and nowhere else.

Report a vulnerability

Found something? Email security@event-tech.llc with the details and how to reproduce it. We'll acknowledge it, keep you posted, and credit you if you'd like. Please give us a reasonable window to fix it before going public.

Free while in beta

Questions from your security team?

Send them over. During early access we answer security questionnaires by hand, and we'd rather answer a hard question now than a surprised one later.

Get early access See pricing