Tenant isolation in the database
Every business record carries its organization. Access rules are enforced by the database itself, not only by application code.
Security and trust
Ticketing touches money, identity and access.
That combination deserves more than a promise. Here is how TixBeam is built and what we ask of ourselves.
The foundations
Four things that are true by design.
We do not hold your money
Ticket payments settle into your own payment provider account, so a platform balance is never a single point of failure.
Tickets that cannot be forged
QR codes are cryptographically signed and validated at the door, and a ticket can only be used once.
Least privilege by default
Roles limit what each team member can see and do, and support access to your organization is explicit and logged.
How we work
Practices, not slogans.
Data protection
Traffic is served over HTTPS and the marketing site, shops, backoffice and scanner run with strict browser security headers.
Personal data of ticket buyers is processed on behalf of the organizer, who remains the controller of that relationship.
Access control
- Organization roles limit what each team member can reach
- The backoffice and scanner are excluded from search indexing
- Sensitive actions are written to an audit trail
- Support access requires an explicit, time-bound session
Change management
- Database schema and access policies are versioned and reviewed
- Automated tests cover tenant isolation and checkout rules
- Nothing reaches production while the quality gates fail
Responsible disclosure
Found something? Tell us first.
If you believe you have found a vulnerability, we want to hear about it before anyone else does.
- Send us enough detail to reproduce the issue
- Give us reasonable time to fix it before publishing
- Do not access, change or delete data that is not yours
- We will confirm receipt and keep you updated on the fix
Your next event starts here
Ready to take control
of your ticketing?
Tell us what you are organizing. We will look at your event with you and show you exactly how it would run on TixBeam.