Snapshot 1767
Normalized text
Scripts and page chrome removed; this is what change detection compares.
Eventbrite Security & Safety Guide PCI Compliant Eventbrite complies with PCI-DSS 4.0.1 Level 1 as both a Merchant and a Service Provider. Registered with both Visa and MasterCard as a PCI-compliant Service Provider. Regularly audited by a Qualified Security Assessor (Coalfire, Inc.) Passes internal and external application and network penetration testing performed by independent security firms. Scanned monthly by an Approved Scanning Vendor (ASV). PCI Attestation of Compliance (AOC) is available for download. Eventbrite employs a cross-functional team responsible for oversight of PCI Compliance. SOC Compliant Eventbrite Systems and Organization Controls (SOC) Reports are independent third-party examination reports that demonstrate how Eventbrite achieves key compliance controls and objectives. Eventbrite SOC 3 Security, Availability & Confidentiality Report, available for Download. Compliance Documents The following documents are available to the public. Applicability to your environment needs to be assessed / approved by your auditors. Eventbrite Latest PCI-DSS 4.0.1 Attestation Of Compliance (Merchant) Eventbrite Latest PCI-DSS 4.0.1 Attestation Of Compliance (Service Provider) Eventbrite Latest SOC 3 Report Eventbrite Latest SOC2 Report Privacy Eventbrite maintains a comprehensive privacy program. To us, this means that although we are required by law or regulation to do certain things, we are continually evaluating whether we can and should do more. We do not sell the personal information of our customers to third parties. We have a full time legal and security team focused on privacy and security issues. We participate in and comply with the EU-U.S. Privacy Shield Framework. You can find out more about our commitment to the EU-U.S. Privacy Shield Framework in our EU-US Privacy Shield Notice. You can find our privacy policy at: eventbrite.com/privacypolicy. Hosting Environment Amazon EC2 hosts Eventbrite's production systems. PCI-DSS Level 1 Service Provider ISO 27001 certified Independently verified and audited SAS-70 Type II and SSAE16 Amazon AWS PCI Compliance site Web and Mobile Application Development Eventbrite is committed to designing, building, and maintaining secure systems. All applications are regularly scanned for common security vulnerabilities including the OWASP Top Ten. Regular training on Secure Coding Practices is provided. All engineers must attend training sessions. No credit card information is permitted to be stored on any mobile device. Use of encryption for both storage and transmission of sensitive information is regularly audited by the Eventbrite Security Team. All web and mobile applications are primarily developed, tested, deployed, and maintained by a full-time, in-house engineering team. Encryption Eventbrite uses strong encryption methods and key management procedures to ensure your sensitive information is protected. All credit card information is encrypted with strong industry-standard cryptographic protocols such as AES and TLS while in transit through our systems. Eventbrite's website and APIs are accessible via a 256-bit SSL certificate issued by Digicert. Credit card information is never stored after transaction authorization. Access to encryption keys is held by the smallest number of Eventbrite employees possible. Our Organization Eventbrite has taken appropriate measures to vet our employees. All employees are subject to reference, education, and other personnel checks. Certain employees are also subject to detailed background checks. Eventbrite maintains an information security training program that meets PCI-DSS standards and complies with the Massachusetts Privacy Law (201 CMR 17). Knowledgeable full-time security personnel are on staff. Require written acknowledgement by employees of their roles and responsibilities with respect to protecting user data and privacy. Incident Response While we don't anticipate there ever being a breach of our systems, we know that no computer system is perfectly secure. In the event of a breach of an Eventbrite information system, we have a detailed Incident Response plan in place. Periodic testing of the response plan. Eventbrite has 24x7 monitoring of its security systems and alerts. Research and Disclosure If you discover a vulnerability with Eventbrite's information systems, report it to us first! Do not attempt to harm Eventbrite, its users, or customer's data. Reach out to security@eventbrite.com to request a responsible disclosure form Site Navigation Use Eventbrite Create Events Pricing Event Marketing Platform Eventbrite Mobile Ticket App Eventbrite Check-In App Eventbrite App Marketplace Event Registration Software Community Guidelines FAQs Sitemap Plan Events Sell Tickets Online Performing Arts Ticketing Software Sell Concert Tickets Online Event Payment System Solutions for Professional Services Event Management Software Halloween Party Planning Virtual Events Platform QR Codes for Event Check-In Post your event online Find Events New Orleans Food & Drink Events San Francisco Holiday Events Tulum Music Events Denver Hobby Events Atlanta Pop Music Events New York Events Chicago Events Events in Dallas Today Los Angeles Events Washington Events Connect With Us Contact Support Contact Sales X Facebook LinkedIn Instagram TikTok Country Argentina Australia België Belgique Brasil Canada (EN) Canada (FR) Chile Colombia Denmark Deutschland España Finland France Hong Kong Ireland Italia México Nederland New Zealand Österreich Perú Portugal Schweiz Singapore Suisse Sverige United Kingdom United States How It Works Pricing Contact Support Contact Sales About Blog Help Careers Press Impact Security Developers Status Terms Privacy Accessibility Cookies United States Argentina Australia België Belgique Brasil Canada (EN) Canada (FR) Chile Colombia Denmark Deutschland España Finland France Hong Kong Ireland Italia México Nederland New Zealand Österreich Perú Portugal Schweiz Singapore Suisse Sverige United Kingdom United States Locale © 2026 Eventbrite © 2026 Eventbrite