Your delegates’ details, kept safe.
An event holds a lot about people: names, employers, phone numbers, dietary and accessibility needs, payments. Here is how weft looks after it, in plain words.
Two-step sign-in for everyone
Every person who signs in to weft uses a second step: a passkey or an authenticator app. There are no passwords to guess or reuse; sign-in starts with a link sent to your email.
Encrypted, then encrypted again
Everything travels over HTTPS and is encrypted where it’s stored. Phone numbers, dietary and accessibility needs are encrypted a second time, with a key for your organisation alone, before they reach the database.
Card details never reach weft
Payments are taken by Stripe on its own secure pages and go to your own Stripe account. weft never sees or stores a card number.
A record that can’t be edited
Every change that matters is logged: who did it, what it was, and when. No one can edit or delete that record through weft.
Roles and access
Your people get the access their job needs, and no more. If weft ever needs to look at your account to help you, that access is read-only, time-limited and shown to you.
Data kept in Oceania
weft runs on Cloudflare. Your database and files are stored in the Oceania region, usually Sydney. An organisation that needs its data held in the European Union can have that.
Backups
The database can be restored to any minute in the last 30 days.
Your data, your call
weft follows the New Zealand Privacy Act 2020. You can export your data whenever you like, and erase a person’s details when they ask.
Working towards ISO 27001.
weft’s security policies follow ISO/IEC 27001, the international standard for information security, and we’re working towards certification.
Many associations and public-sector buyers ask suppliers to fill in a security questionnaire. We’re happy to: get in touch and we’ll send it back completed.
Found a security problem? Please tell us at security@weft.events and we’ll look at it straight away.