Security and trust
What we do to keep your events, your buyers and your money safe, in plain words, and how to tell us about a problem.
Your data stays in Canada
Packdoor's database is hosted by Supabase in the Montreal region, and the servers that run the site are in Montreal (pages may be served from other countries for speed). The full list of the companies we use is in our privacy policy.
The database is backed up daily by its provider and stored encrypted.
Payments are handled by Stripe
Card numbers go straight from the buyer's browser to Stripe, a certified payment processor. Packdoor never sees or stores a card number. Your payouts are made by Stripe to your bank.
Encryption in transit
Every page, the console and the API are served over HTTPS only. Tickets carry a signed code, so a made-up ticket does not scan.
Who can see what
- Your team gets roles (owner, admin, event manager, order manager, finance, door staff), and access can be limited to one city, brand or event.
- Every change to money, tickets and settings is written to an audit log you can read.
- Packdoor staff tools are limited to a few people, and what they do is logged.
- You sign in with an emailed link or code, or with a password.
Monitoring
Packdoor's health is checked around the clock, and errors are reported to us as they happen.
Report a security problem
Found a weakness? Email privacy@packdoor.ca with what you found and how to see it. Please do not look at other people's data, slow the service down or go public before we have fixed it. We reply within one business day.
Our security.txt file is at /.well-known/security.txt.