Identity and access
VenuePivot supports role-based permissions, organization and company boundaries, session controls, multi-factor authentication workflows, and administrative security policies. Access should be granted according to least privilege and reviewed regularly by each organization.
Data protection
Production traffic is protected with TLS. Sensitive credentials and application data are handled through controlled storage and access paths, with tenant-aware authorization enforced throughout the application.
Monitoring and accountability
Security-relevant actions and administrative changes are recorded for investigation and accountability. Operational health, deployment verification, and recovery evidence are monitored through controlled release and infrastructure processes.
Secure development
Changes are reviewed through automated builds and tests, dependency and code-quality checks, guarded database migrations, and staged deployment before Production promotion. Security controls are tested alongside functional behavior.
Continuity and recovery
VenuePivot uses managed cloud infrastructure, encrypted release evidence, health checks, controlled rollback, and database backup and recovery procedures. Specific recovery or availability commitments are governed by the customer’s plan and agreement.
Your responsibilities
Customers should enforce strong authentication, keep user and role assignments current, protect exported data, configure integrations carefully, and promptly report suspicious activity.
Report a security concern
Please submit suspected vulnerabilities or security incidents through our support contact form. Include enough detail for investigation, avoid accessing other customers’ data, and do not disrupt the service.