Security Guide & Practices

Eventspot takes the security of your data seriously. We apply industry-standard controls to how your information is stored, transmitted and handled. This guide summarizes our data & information security policies and practices for customers and prospective customers who want a clearer understanding of how we protect their data.

Encryption: All data is encrypted both at rest and in transit.

Servers & Infrastructure: Eventspot’s services run on a secure, scalable virtual private cloud platform designed for high availability. We apply rigorous controls to protect every layer of our infrastructure.

Backups: All data is backed up at least once a day, so that access to personal data can be restored promptly in the event of a physical or technical incident.

Team Availability, Incident Response and Logging: A dedicated security team responds to every security-related issue and alert. The team operates around the clock and continuously monitors for breaches and emerging threats. Any security incident is reported immediately and handled through our incident management procedure to ensure a rapid resolution.

Security:

check icon
Eventspot secures all data in transit using HTTPS (TLS) certificates across our web portal and product.
check icon
Eventspot encrypts data at rest to protect your information while it is stored.
check icon
No third party has access to Eventspot’s infrastructure or data, ensuring the physical security of every location where personal data is processed.
check icon
Eventspot protects its servers with DDoS mitigation.

Data:

check icon
Eventspot promptly deletes all data associated with expired licenses. Customers may also request the permanent deletion of their data from our systems at any time, in line with our limited data-retention policy.
check icon
Customers may request an export of all data held in their account, supporting data portability and the right to erasure.
check icon
All environments are strictly separated. Production data is never used for testing.

Code & Quality

A dedicated development team maintains version control for all code. Access is restricted by internal role, and a record is kept of every repository check-in and check-out.

A dedicated quality assurance team reviews all code before release. Every deployment undergoes functional, stability and UI/UX testing before it reaches production.

Other Security Measures

All employees and contractors working on the product complete a background and criminal-record check before appointment. Each signs a non-disclosure agreement containing confidentiality obligations, and completes a mandatory security induction program before onboarding, which is refreshed annually. For further information, please contact our team through the Contact Us page.