Security

1. Our approach

Security is part of how we ship product, not a separate layer we add later. We focus on protecting confidentiality, integrity, and availability of organiser accounts, event configuration, and attendee information processed through the platform.

Practices below describe our current controls. They may evolve as the product and infrastructure change. For contractual security commitments, refer to your agreement with Stratawiz.

2. Application security

• Role-based access so organisers can limit who manages events, views reports, or changes settings
• Authenticated sessions with industry-standard password hashing for account credentials
• Input validation and output encoding on forms and APIs to reduce common web risks
• Separation between customer workspaces so one organiser’s event data is not exposed to another by default
• Least-privilege internal access for Stratawiz staff supporting the product

3. Data protection

In transit

Traffic to EventBuzz websites and APIs is protected with TLS (HTTPS) so data exchanged between browsers, apps, and our services is encrypted in transit.

At rest

Customer data stored in our managed databases and object storage is encrypted at rest using provider-supported encryption capabilities.

What we process

Depending on how you configure an event, this may include organiser profiles, registration fields, check-in records, engagement activity (polls, quizzes, Q&A), and messages handled by the AI concierge. See our Privacy Policy for how personal information is collected and used.

4. Infrastructure & operations

• Hosting on reputable cloud providers with physical and network controls appropriate for business SaaS
• Environment separation (for example production vs. non-production) to reduce risk from testing and development work
• Regular backups of critical data with restoration procedures reviewed as part of operations
• Monitoring and alerting for availability and unusual error patterns that may indicate incidents
• Dependency and package updates as part of ongoing maintenance

5. Access control & people

Access to production systems and customer data is limited to personnel who need it for support, operations, or engineering. Accounts use strong authentication where available. Offboarding processes revoke access when team members leave or change roles.

Organisers should also apply good hygiene on their side: unique passwords, careful invitation of team members, and prompt removal of users who no longer need access to an event workspace.

6. AI concierge considerations

The AI concierge answers from your live event context so attendees get accurate, timely information. Prompts and responses may be processed by model providers under our configuration to deliver the feature. We design flows so answers stay grounded in the event data you manage in EventBuzz, and we continue to refine safeguards against misuse.

Organisers remain responsible for keeping agenda, room, and policy information up to date so automated answers stay correct.

7. Customer responsibilities

You help keep events secure when you:

• Protect account credentials and enable available security options
• Collect only the attendee data you need, and provide required privacy notices
• Configure roles and permissions appropriately for your team and onsite staff
• Use shared devices carefully (sign out after check-in desks or kiosks)
• Report suspected unauthorised access or misuse promptly

8. Incident response

If we become aware of a security incident affecting EventBuzz customer data, we investigate, contain, and remediate according to our internal process. Where legally required or contractually agreed, we will notify affected customers without undue delay and share information reasonably needed for their own response.

9. Compliance mindset

EventBuzz is designed with privacy and security expectations common to professional events and enterprise buyers — including controlled access, encryption in transit and at rest, and clear data handling practices described in our Privacy Policy and Terms of Service.

Formal certification status (for example SOC or ISO) can vary by product and over time. Contact us if your organisation needs a security questionnaire, DPA, or vendor review package.

10. Responsible disclosure

If you believe you have found a vulnerability in EventBuzz or related Stratawiz services, please tell us privately so we can investigate before public disclosure.

Email support1@stratawiz.com with a clear description, steps to reproduce where possible, and your contact details. Please avoid accessing or modifying data that is not yours, and do not disrupt live customer events while testing.

11. Contact

Security or trust questions:

Stratawiz Technologies Pvt. Ltd.
Email: support1@stratawiz.com
Phone: +91 91758 91016