Protecting the people at your event.
Events hold personal details: names, addresses, dietary needs, access requirements, payments. Here is how Attergo keeps them safe, described plainly.
What is in place.
Every workspace is isolated in the database
Workspace and event data is protected by row-level security enforced by the database itself, not only by application code. The application connects with a role that cannot bypass those rules, so one host can never read another host’s guests.
Access scoped to the job
Co-hosts, planners, suppliers, exhibitors and door staff each get permissions for a specific event and a specific task. A caterer sees catering counts and allergies, not contact details. Collaborators never see other clients’ events.
Strong sign-in
Hosts can sign in with passkeys and protect their accounts with two-factor authentication. Sessions use secure, host-only cookies. Sign-in links and password resets expire and work once.
Guests without accounts, safely
Guest invitation links are long, random and specific to one household or person. They open only that guest’s invitation and answers, never anyone else’s.
Uploads are scanned
Documents, photos and attachments are checked for malware before anyone can open them. Files that fail the check are never served.
Encrypted backups
Event data is backed up every day, and backups are encrypted before they are stored.
Audit history
Privileged actions such as permission changes, published seating plans, financial corrections and administrative recovery are recorded with who did what and when.
No card numbers stored
Attergo never stores card numbers. Payments run through the payment provider’s hosted checkout, and passes are issued only after the provider confirms payment.
Sensitive details minimised
Dietary and access information can reveal health or religious details, so it is requested only when needed and shown only to the people who must act on it. Optional social preferences require each adult guest’s consent and can be withdrawn.
What we do not claim.
Attergo does not currently hold third-party security certifications or audit reports, and this page does not claim compliance with any particular law. When that changes, this page will name the certification and the scope it covers.
EventTwin plans help with layout and capacity, but they are not a fire safety or accessibility certification. Your venue and local authorities remain responsible for approving final layouts.
Found a vulnerability? Tell us.
Email [email protected] with the subject “Security report”. Include what you found, where, and the steps to reproduce it.
- Only test against your own account and your own events.
- Do not access, change or delete other people’s data.
- Do not run tests that degrade the service for others.
- Give us reasonable time to fix the issue before sharing details.
We will acknowledge your report, keep you informed while we work on it, and credit you if you would like.
Read the privacy notice for how personal information is handled.
Plan with confidence.
Start free, invite your guests, and keep every detail in one protected place.