SECURITY is OUR TOP PRIORITY
We take an end-to-end approach to data security, privacy, and control so your data is always safe.
Here’s what we’RE ALL ABOUT:
From encryption to external security assessments, we take a holistic approach, as your security is our utmost priority.
Our security and privacy standards are embedded in everything we do, from the tools we use to the features we launch.
We’ve equipped ourselves with industry-acclaimed tools like SonarQube, AWS Config, CloudWatch, and Docker to make our magic. Additionally, we don’t build anything new unless it upholds security and privacy standards. We use application vulnerability and malware monitoring/management using AWS Inspector and threat detection using GuardDuty.
Stadium takes the same meticulous approach to your data as our products! We work diligently to maintain the privacy of the data you entrust with us.
Most importantly, the data you store in Stadium products is yours. We apply our security protocols for protection and use them only as permitted in our Customer Terms of Use and Privacy Policy. We never share your data with customers and never sell it—we pinky promise on snacks!
Whether it’s GDPR or similar local regulations, you deserve data privacy, regardless of where you are.
We offer product features like “GDPR delete” that permanently deletes record data, “lawful basis to communicate” consent tracking, subscription settings, and cookie tracking consent banners that are customizable across regions to make it easy to comply with GDPR and similar regulations.
At Stadium, we add a magical flair to everything we do. We take that same precision with your customer data!
We take an extensive approach to implementing layers of security throughout our organization. We are also constantly iterating, defining new security controls, and improving our existing ones. Our security program is powered by compliance, regulatory requirements, and industry best practices.
It’s important to us that our products provide a safe and trustworthy place for your data, ensuring the best experience. We use the same advanced security measures of secure software development processes, infrastructure management, and alerting methodologies across the platform and site.
Keep all of your data safe and protected from bad actors.
Manage customer data while being mindful of local regulations.
Information about the subprocessors Stadium uses to support the delivery of our Services can be found in our list of Stadium subprocessors.
Email us at hi@bystadium.com for more information.
Stadium’s product infrastructure is hosted on Amazon Web Services (AWS) in the United States East region. Stadium products are hosted with cloud infrastructure providers with SOC 2 Type 2 and ISO 27001 certifications, among others.
You bet we do! Stadium has confidential SOC 2 Type 2 reports attesting to the controls we have in place governing the availability, confidentiality, and security of customer data as they map to the TSPs. The report is available upon request at hi@bystadium.com.
All sensitive interactions with the Stadium products (e.g., addresses, login, authenticated sessions etc.) are encrypted in transit with TLS 1.2 or 1.3.
Stadium leverages several technologies to ensure stored data is encrypted at rest. The physical and virtualized hard drives used by Stadium product server instances as well as long-term storage solutions like AWS S3, RDS use AES-256 encryption. User passwords, addresses, and phone numbers are hashed and are encrypted at rest.
Please visit https://www.bystadium.com/sso for detailed information on how to set up SSO.