Trust center
Everything an IT or security team asks before choosing LiveEvent: our commitments, stated as they are, our subprocessors, and our security documents, available on request.
The documents
Security policy, business continuity plan and supporting evidence, to read online or save as PDF.
An assistant
Ask your questions: it looks for the answer in our documents and tells you which ones it read.
Your questionnaire, prefilled
Upload your security questionnaire (Excel, Word or PDF): it comes back filled in, every answer sourced.
Our commitments
What is in place today. What is not yet in place is stated too.
Platform security in detail- Hosting: database at Supabase, in London (United Kingdom, covered by an EU adequacy decision); application served by Vercel.
- Encryption of traffic (TLS) and of stored data, provided by the hosting providers.
- Customer isolation in three layers in the database: organisation identifier on every row, composite foreign keys, row-level access rules.
- Two-factor authentication available, and each organisation can require it for all its members; it is not yet enforced on every account.
- Security log per organisation (sign-ins, members, exports, settings), kept twelve months and exportable to your SIEM.
- Automated code analysis and vulnerability scanning every quarter; no third-party penetration test yet.
- Professional liability and cyber insurance (Hiscox).
- GDPR-compliant data processing agreement, record of processing activities and incident notification procedure.
- Written security policy and business continuity plan, available below on request.
The documents
Available once your request is approved, through a personal link valid for thirty days. Every document you open carries your name.
- PrésentationLiveEvent est une plateforme en ligne qui produit et exploite les mini-sites d’événements : le site public d’un événement, ses inscriptions gratuites, son programme, son interactivité en salle, le contrôle d’accès le jour J, et le rapport qu’on envoie ensuite au commanditaire.
- Politique de sécurité des systèmes d’information (PSSI)Les règles de sécurité que POINTE NOIRE applique à LiveEvent : organisation, accès, développement sécurisé, exploitation, journalisation, incidents, sous-traitants — et le plan d’action en cours.
- Plan de continuité et de reprise d’activité (PCA / PRA)Objectifs de reprise (RTO / RPO), sauvegardes, scénarios d’incident et procédures de restauration, communication de crise, tests du plan.
- Subprocessors
Our subprocessors
| Subprocessor | Role | Region |
|---|---|---|
| Supabase | Database, authentication and file storage. | United Kingdom (London) - adequacy decision |
| Vercel | Hosting for the application and the public sites. | United States and European Union |
| Resend | Sending transactional emails and campaigns. | United States |
| Cloudflare | Anti-bot protection on the registration form (Turnstile), video delivery of live streams and replays (Stream), relay for Studio and Meeting video calls (TURN and STUN). | United States |
| OpenStreetMap Foundation (Nominatim) | Geocoding for the participant map: only receives a place name - “city, country” - on the organiser’s gesture, never an address nor a person. | United Kingdom (London) - adequacy decision |
Request access
We review every request, usually within one business day. You then receive a personal link by email.