Security
What we promise, and what we do not.
Security at Eventwerk is not a promise on a banner, but a set of decisions you can read up on. Here they are, with the limits attached.
Sign-in without a password
There are no passwords that could be stolen.
- Access via a one-time link to the stored email address
- No password and no password database that could be captured
Where the data lives
We run no servers of our own. The building blocks are established services, each in a clear place.
- The application and database run on Railway
- Files and recordings are stored with Bunny, data centre Germany (de-s3.storage.bunnycdn.com)
- Payments run through Stripe; we see no card data
- Emails are sent through Resend
Retention and deletion
Data does not stay around. Deadlines are set and a service cleans up.
- Guest and registration data is deleted after a configurable period, 30 days after the event by default
- A service runs every six hours and removes expired data
- Events can be deleted entirely
- Recordings are deleted after seven days, regardless of whether a copy sits in your own storage
Rights and information
You reach your data whenever you want.
- Export as CSV per event
- Deletion through the event deletion
- Information via the support address
Access and roles
Not everyone needs everything. Roles separate who may do what.
- Roles per organisation: owner, admin, check-in staff
- Check-in staff see only what the door needs
- Photos and consents are kept separately
Measurement only with consent
No silent observation. We count only once you allow it.
- Google Analytics and PostHog only with consent
- Without session recording
Data processing agreement
For organisations that need a data processing agreement, we provide one.
- Data processing agreement (DPA) on request at the support address
What we do not promise
Honesty is part of security. These things we cannot show, and we do not pretend otherwise.
- No ISO certificate
- No penetration test
- No server infrastructure of our own
Read on
Security, pricing and operations belong together.
A security question still open?
Write to the support address: [email protected]. We answer concrete questions instead of sending a brochure.