Security
How Kickets protects your data
Kickets is built with security as a foundational principle — not an afterthought.
Security architecture
Row-level security (RLS)
Every database table uses row-level security policies. Organizers can only access their own data — this is enforced at the database engine level, not application code.
Authenticated API access
All API calls require valid authentication tokens. Unauthenticated access is blocked at the infrastructure level.
Encryption
Data is encrypted at rest and in transit. All connections use HTTPS/TLS. Database storage uses AES-256 encryption.
Audit logging
Administrative actions and security-sensitive operations are logged in an immutable audit trail for compliance and incident investigation.
Payment security
Kickets uses Stripe for payment processing. Credit card data never touches Kickets servers.
- PCI DSS Level 1 compliant (via Stripe)
- Card data processed entirely by Stripe — never stored on Kickets
- Stripe Connect for secure organizer payouts
- Webhook signature verification for all payment events
Data protection
Infrastructure
Kickets runs on enterprise-grade cloud infrastructure with automatic scaling, daily backups, and high-availability architecture.
Questions about security? Contact us at security@kicketsctrl.com