Security & compliance

Security built in,from checkout to the door.

ShowTix runs on Stripe and modern cloud infrastructure. Card details never touch our servers, every byte moves over encryption, and your buyers’ data stays yours. Here is how we keep fight night secure.

Certifications & compliance

Enterprise-grade compliance, built in.

ShowTix is built on partners and practices that meet internationally recognised security and privacy standards. Attestations from our providers are available on request.

AICPA

SOC 2

SOC 2 infrastructure

ShowTix runs on payment and cloud partners (Stripe and our hosting provider) that maintain SOC 2 Type II attestation, with data encrypted in transit and at rest.

UK & EU GDPR

Buyer data is processed lawfully and transparently under UK GDPR, only for your event. Your fans are yours, always. We never sell or cross-sell them.

PCI

DSS

COMPLIANT

PCI DSS Level 1

Card payments are handled entirely by Stripe, certified to PCI DSS Level 1, the highest tier. ShowTix never stores, sees or transmits raw card details.

How we keep it secure

Secure by design, not by afterthought.

Payments powered by Stripe

Stripe Connect moves the money and runs the payouts. Card details are tokenised by Stripe and never touch ShowTix.

Encrypted end to end

Everything moves over TLS 1.2+ in transit and is encrypted at rest. No plaintext fan data sitting around.

You own your data

Export your buyers anytime, request deletion, and trust that we never resell or cross-sell your audience.

Least-privilege access

Role-based access controls, scoped to what a person needs, with audit trails on sensitive actions.

Resilient by default

Managed cloud infrastructure with automated backups and monitored uptime, so the door keeps scanning.

Responsible disclosure

Found something? Email security@fortyshowtix.tech and we will work with you to fix it fast.

Payments & payouts

Built on Stripe.

Every transaction runs through Stripe, one of the most trusted names in payments. They hold PCI DSS Level 1 and SOC 2 Type II, so the most sensitive part of ticketing is handled by experts, and ShowTix never has to touch a card number.

stripe

A security or compliance question?

Talk to the team. We are happy to share attestations and walk you through how your fans’ data is handled.