Your data, protected
EventfullyManaged is built on the Burdenoff platform with security and privacy designed in from the start.
How we protect your events
The measures that protect your data and your attendees' trust.
Encryption in Transit & at Rest
Traffic between your browser and our servers is protected with TLS, and data is encrypted at rest.
Role-Based Access Control
Every action is scoped by role and protected by the Burdenoff platform’s RBAC — organizers, staff, and volunteers see only what they should.
Secure, Isolated Data
Event and attendee data is stored on managed cloud infrastructure with tenant isolation and regular backups.
Account Protection
Authentication is handled centrally by the platform, with protections designed to keep accounts safe.
Privacy Protection
Your privacy matters to us. Here's how we protect your personal information.
Data Minimization
We collect only the data needed to run your events and improve the product — nothing more.
Transparent Policies
Our privacy policy clearly explains what we collect, how we use it, and your rights.
User Control
You can view, edit, export, or delete your information through your account and on request.
No Data Selling
We never sell your personal data, and we never use it for undisclosed purposes.
Our Security Principles
The principles that guide how we build and operate the platform.
Secure by Design
Security is built into the platform from the start, not bolted on later.
Privacy by Default
Conservative defaults that protect attendee data out of the box.
Least Privilege
People and services get only the access they genuinely need.
Defense in Depth
Layered protections across the network, application, and data tiers.
Compliance & Certifications
Plainly stated: what we hold, and what we make available to customers.
SOC 2 Type II
Not held
EventfullyManaged does not hold a SOC 2 Type II report. A readiness assessment against the Trust Services Criteria was completed in October 2026; no audit has started yet. Our controls are described in the Security Exhibit, available to Enterprise customers.
ISO/IEC 27001
Not held
EventfullyManaged does not hold ISO/IEC 27001 certification. A readiness assessment was completed in October 2026; no certification audit has started yet. Security practices follow the Burdenoff platform controls described on this page.
GDPR / DPDP Act
DPA available
A Data Processing Addendum covering GDPR and the Indian DPDP Act is available for Enterprise agreements.
Security Exhibit
Available on request
A Security Exhibit detailing our technical and organisational measures is available to Enterprise customers as part of the contract stack.
EventfullyManaged holds no independent security certifications, and we do not claim any. When a SOC 2 report or ISO/IEC 27001 certificate is issued, this page will name the auditor and the period it covers. Enterprise customers can request our Security Exhibit and DPA.
Stay safe with EventfullyManaged
A few best practices to keep your account and your events secure.
Use Strong Passwords
Create a unique, complex password and enable multi-factor authentication when it’s available.
Manage Team Access
Give staff and volunteers only the roles they need, and remove access when an event ends.
Verify Communications
We’ll never ask for your password. Check that emails and links come from official sources.
Report Suspicious Activity
If something looks off with your account or event, contact us right away so we can help.
Responsible Disclosure
Found a potential security issue? We welcome responsible disclosure from researchers and users. Email our team with the details and we'll investigate promptly.
Secure by Design
Run your events with confidence on a platform built for security and privacy.