Security you can verify
Encryption everywhere, secure sign-in for your team, role-based access for every action, and audit logs that record what happened. Built for organizations that take security seriously.
Key Features
Encryption in transit & at rest
TLS 1.2+ for all traffic; AES-256 for data at rest. Organization credentials and integration secrets live in an AES-256-GCM encrypted store, isolated per organization.
Secure sign-in
Sign in with Google or Facebook on your branded portal; enterprise SSO (OIDC/SAML) is set up with our team on qualifying plans — contact us.
Role-based access
Granular roles for organizers, refs, scouts, finance, and admins. Permissions audit-logged.
Audit logs
Every action timestamped, signed, and exportable. Logs retained per your plan’s retention window.
Security reviews & hardening
Ongoing internal security reviews and hardening passes, including SSRF/IDOR protections and webhook signature verification. Additional detail available under NDA on request.
Vulnerability disclosure
Responsible disclosure guidelines for security researchers. No formal public bounty program, but valid, high-impact findings may be eligible for a reward at our discretion.
From request to logged action
Authenticate
Identity verified via social login or password+MFA.
Authorize
Role-based access checks every action.
Encrypt
Data encrypted in transit and at rest.
Audit log
Action signed and timestamped to log.
Monitor
Anomaly detection runs in the background.
Report
Audit reports available on demand.
Who it’s for
For every security posture
Enterprise
Enterprise SSO set up with our team on qualifying plans, role-based access, and security reviews for large-scale organizations.
Scholastic
FERPA-aware data handling, parental access controls, and minor protection.
Publisher partners
NDAs, custom security reviews, and support and uptime commitments agreed in your contract for publisher engagements.
FAQ
Security questions
Security questions answered
Talk to our security team for DPAs, our current compliance status, security architecture details, and anything else your procurement needs.
Talk to security team