evenito Security White Paper — Enterprise-level security
Die evenito event management software is used in various market segments worldwide. Companies entrust us with their sensitive data. Our commitment: Keep data private, protect information and ensure maximum security.
To achieve this goal, we have a Information Security Management System (ISMS) implemented that complies with the international best practices of ISO 27001:2013. Our data protection and information security team ensures Confidentiality, Integrity, and Availability customer data — without sacrificing seamless delivery of our services.
This white paper provides insight into our security principles and processes, which we are continuously improving.
1. Cloud security
Our platform runs on Google Cloud Platform and benefits from industry-leading infrastructure:
- Encrypted data — both during transmission and in standby mode.
- State-of-the-art data centers — multi-layered physical security with biometric systems, alarms, and 24/7 monitoring.
- Certified cloud compliance — including ISO/IEC 27001/27017/27018/27701, SOC 1/2/3, PCI DSS, HIPAA, GDPR, CCPA, FINMA.
- Progressive security architecture — DDoS protection, strong authentication, 24/7 threat detection
All of our data centers are located in switzerland; we guarantee 100% data residency and meet regulatory requirements such as FINMA Circular 2018/3.
2. Network security
Our networks are through continuous scans, Penetration testing and Secure-by-design architecture protected:
- Constant monitoring of all production systems.
- Two-factor authentication for accesses.
- External penetration testing in addition to internal audits.
- TLS/HTTPS encryption for all data transfers.
3. Software security — Technical measures
We focus on preventive safety in development:
- Vulnerability Management — static code analysis, SSL monitoring, dynamic security testing.
- Secure development — OWASP training for developers, protection against XSS, CSRF, SQLi, separation of test and production environments.
- application security — role-based access control, adaptive web application firewall, HTTPS/TLS encryption, logical data separation.
4. Software security — organizational measures
- Incident Management — structured process for security events.
- surveillance — Log analysis and malware prevention.
- Safety awareness — annual training, mandatory confidentiality agreements.
- Vendor risk management — Verification and approval of external partners only if strict safety requirements are met.
5. Safety compliance — ISO 27001
ISO 27001 certification proves our structured safety management:
- Established Safety guidelines.
- Implementation and risk assessment procedures.
- Emergency plans and continuous improvement processes.
6. GDPR compliance
We implement the General Data Protection Regulation (GDPR) comprehensively:
- Data processing agreements with all customers.
- Technical and organizational measures for data protection.
- Compliance with cookie policy, terms and conditions, data management.
7. About evenito
Evenito is a holistic event management platform, which combines features such as event websites, personalized emails, guest management, virtual event rooms, check-in apps, and more. The aim is to to reduce administrative effort, more Room for creative planning to create and provide a sustainable event experience.
.svg)
.png)
.svg)
.svg)
.avif)
