Account access
ASP.NET Core Identity manages passwords, lockout controls and secure authentication cookies. Production quick-login is disabled.
PRIVACY & DATA PRACTICES
Protecting event information is part of the work.
EventHub is designed for organizations that need clear control over event and attendee information. This page summarizes the current application safeguards; it is not a substitute for your organization’s privacy notice or a legal compliance certification.
Attendee data
Attendee name and email fields are encrypted with AES-GCM before they are stored in PostgreSQL. Encryption uses a server-side secret.
Tenant boundaries
Events and registrations are scoped to a tenant. Role and responsibility checks are enforced on protected management routes.
Payments
EventHub does not store payment card data. A payment provider must be connected and tested before live payments are enabled.