Security
Built secure, not bolted on.
Security is part of the architecture, from database isolation to payment processing.
How we protect your data
Secure by design
Enterprise-grade data isolation
Every organization's data is isolated at the database level with Row-Level Security, not just application-level checks. Even if there were a bug in the code, the database itself prevents cross-tenant access.
Zero-trust architecture
All data access is validated server-side through cryptographic authentication. Admin actions are verified at the database layer, not in the browser, so they cannot be spoofed or bypassed.
Secure public portals
Sponsor, exhibitor, and attendee portals use 256-bit cryptographically random tokens. No passwords to leak, no accounts to compromise.
Full audit trail
Every action, from event updates to portal profile changes, is logged with timestamps and metadata. Your compliance team gets complete visibility.
Brute-force protection
Rate limiting on sensitive endpoints, such as promo code validation, prevents automated attacks.
Payments powered by Stripe
PCI-compliant payment processing through Stripe Connect. EventLantern never stores credit card data.
For RFPs and enterprise teams
Security overview
| Area | Implementation |
|---|---|
| Data isolation | Row-Level Security per organization |
| Authentication | Email verification required, no anonymous access |
| Authorization | Role-based (Admin/Member) enforced server-side |
| Encryption | TLS in transit, AES-256 at rest (via infrastructure) |
| Audit logging | All mutations logged with actor, entity, and metadata |
| Payment security | PCI DSS via Stripe, no card data stored |
| Portal access | 256-bit random tokens, rate-limited endpoints |
FAQ
Security questions
Common questions about how EventLantern protects your data.
How is my organization's data isolated?
Every organization's data is isolated at the database level using Row-Level Security (RLS). Even if a code-level bug exists, the database itself prevents cross-tenant data access.
Is EventLantern SOC 2 compliant?
EventLantern is built on infrastructure that meets SOC 2 Type II standards. Our hosting provider and payment processor both maintain independent SOC 2 certifications.
How are payments secured?
All payments are processed through Stripe, a PCI DSS Level 1 certified payment processor. EventLantern never stores credit card numbers on its own servers.
Are sponsor and attendee portals secure?
Yes. All portals use 256-bit cryptographically random access tokens. There are no passwords to leak or accounts to compromise.
Do you maintain audit trails?
Every action, from event updates to portal profile changes, is logged with timestamps and metadata, giving your compliance team full visibility.
Ready to run a secure event?
Get started with EventLantern and give your attendees and stakeholders the protection they deserve.