Trust architecture

Bank-grade safety.
Neighborhood trust.

Your organization and your patrons deserve world-class security. We deliver it without holding your ticket revenue, showing ads at checkout, or tracking and selling your data. Here is how we protect payments and keep your patron list separate.
Stripe Connect
Privacy-first checkout
No ad tracking
Global network map with glowing connection lines on a dark background

Hosted on Cloudflare

Organization checkout and staff tools run on a global network with encrypted connections and DDoS and bot protection at the perimeter.

Built to stay online

We verify payment confirmations before tickets are issued, encrypt data in transit across our network, and keep venue admin tools behind secure logins.

  • Payment confirmations verified

    We verify Stripe payment notifications before tickets are issued. No ticket without a confirmed payment.

  • Staff sign-in for venue admin

    Venue tools require authenticated team members.

The three pillars

Payments, patron data, and uptime; each handled with the same transparency we bring to box office fees.

Your patrons, your data

Your patron list stays yours. Orders, buyer details, and sales reports belong to your venue only. We don't sell patron profiles.

100%

Your list

CSV

Exports any time

Payments you can trust

Your sales go to your bank through Stripe Connect. You remain merchant of record; card numbers stay with Stripe.

  • If applicable, the flat 6% all-inclusive box office fee shown before patrons pay.
  • You can decide to absorb the fee or pass it through to patrons.

Built to stay online

Encrypted connections, secure webhooks, and staff-only admin routes. All designed so show night doesn't depend on a single fragile server.

The venue-first pledge

We pledge never to prioritize dark patterns, hidden fees, or data harvesting over the security and integrity of your venue's reputation.

Read our data practices

SAQ-A

PCI card scope

Stripe

Your payouts

$0

Ad fees on checkout

Report a security concern

If you believe you've found a security issue, email us with steps to reproduce. We acknowledge actionable reports within two business days.

security@yourboxoffice.net

For payment disputes on a specific order, contact the venue first; see our refund policy.

Compliance roadmap

Formal SOC reporting and additional certifications (such as ISO 27001) are on our roadmap—not shipped today. Card security currently relies on Stripe Connect and SAQ-A scope. We will update this page the moment those credentials land.

Ready for a secure box office?

Read how we handle patron data, or reach out if you have questions before your first event.