Skip to content

Security & compliance

Secure. Compliant. Dependable.

Ticketing means working with sensitive personal and payment data. That is why our platform meets the highest standards for security and compliance, in every system and every process.

Security is the foundation of every Full House

Full House Technology runs on Vivenu's platform, trusted by more than 1,000 organisations worldwide. To that we add our own focus: more than 100 organisers across the Benelux who build on us every day.

From certified processes to encrypted infrastructure: security is not an extra, it is built into everything.

Compliance at the level large organisations are entitled to expect

SOC 2 Type II

Independently audited controls for security, availability and confidentiality, implemented and operating in line with the AICPA Trust Services Criteria.

GDPR

Personal data is processed lawfully and transparently, solely for legitimate business purposes.

PCI DSS

Payments run through recognised payment processors. Our clients work with Pay.nl as their standing payment partner by default, and Stripe, Adyen, Worldline and Shift4 are ready when needed. That way payment always goes through and card details are processed securely.

Access and identity management

Role-Based Access Control (RBAC: permissions by role), Multi-Factor Authentication (MFA: mandatory for privileged accounts), Single Sign-On (SSO: OIDC and SAML 2.0 for central authentication), and Audit Logging (all authentication, configuration and access events are logged and retained).

Sports compliance

for professional football we additionally support the KNVB connection for C3V, for stadium bans.

Infrastructure and application security

  • Capacity that scales with you: the infrastructure scales automatically with demand at any given moment, including at peak moments when sales open.
  • Separated containers: services run independently of one another in their own containers, for less risk and more consistency.
  • Bot detection: automated and malicious requests are identified and blocked in real time.
  • Network monitoring and protection: continuous monitoring, WAF filtering and anti-DDoS protection against network-level attacks.

Data protection and resilience

  • Encryption: data is encrypted in transit (TLS 1.2+) and at rest (AES-256).
  • Data isolation: customer data is logically separated to prevent cross-tenant access.
  • Backup and recovery: redundant backups and tested recovery procedures safeguard the durability of data.
  • Data integrity checks: automated validation ensures that stored and transmitted data remains unaltered.

Join the world of flexible ticketing

We get the most out of ticketing for ambitious organisers, worldwide. Are you in?

Get in touch