Security

Your book is yours.
We built it that way.

An agency's roster, its venues, its fees and its margins are the business. This page says plainly how GigSpace keeps them yours, and what we do not claim.

  • Fenced per agency
  • Encrypted connections
  • EU-hosted database
  • No card data, ever

The fence

Your agency, and only your agency.

GigSpace is one platform shared by many agencies, so the first job is making sure none of them can ever see another's book.

  • Fenced in the database, not on the screen

    Every read and every write is checked against your agency by the database itself. A screen that hides the wrong rows is not the fence: the rows are never sent.

  • Each person sees their own part

    An artist sees their own gigs and fees. A venue sees its own bookings and bills, never your margins. A venue that works with two agencies sees each one's separately.

  • Roles you set

    Full bookers, per-area permissions or read-only: you decide what each teammate can do, and the database refuses the rest. A read-only user is never shown a button it would refuse.

What protects it

Nine things, said plainly.

No padlock clip-art. Each of these is in the product today.

  • Encrypted on the way

    Every connection to GigSpace is HTTPS, and browsers are told to refuse anything else. The site cannot be framed inside another site.

  • Passwords we never see

    Passwords are stored hashed, never as text. A new sign-up is confirmed with a six-digit code sent to its email.

  • A strict script policy

    Inside the signed-in areas, the browser runs only the scripts GigSpace itself serves for that page. Injected code is refused by the browser, not just filtered by us.

  • Rate limits

    Public forms and outgoing emails are rate-limited, so nobody can use GigSpace to flood an inbox or hammer a public form.

  • Uploads are checked

    Photo and logo uploads accept images only. Formats that can carry a script are refused, and nobody can list what a storage bucket holds.

  • Errors stay private

    When something fails, you get a plain sentence. The raw database message stays on the server, where it cannot leak how things are built.

  • The phone apps lock

    A PIN, with Face ID or Touch ID if you like, every time the app is opened. The sign-in on the phone is stored encrypted, with its key in the phone's own keystore.

  • A record of who did what

    Team Activity keeps your agency's own log of bookings, changes and cancellations, with a name and a time on each.

  • Kept up to date

    The code behind the site and all three apps is watched for vulnerable dependencies, and every change passes type-checks, tests and a build before it ships.

Money and data

The safest data is the data we never hold.

  • Your money never touches us

    GigSpace is not a payment processor. Venues pay agencies and agencies pay artists, directly, as ever. We hold no card numbers and no bank logins, so there are none to lose.

  • Hosted in the EU

    The database is hosted in the European Union, and GigSpace is an Irish company working under the GDPR. The few providers we use are named in the Privacy Policy.

    Read the Privacy Policy

  • Yours to take away

    Anyone can delete their account from inside the app, and a public page explains how it works without signing in. What the law makes us keep, such as financial records, is kept and its use restricted.

    How deletion works

  • Our own staff, on a short lead

    GigSpace staff sign in with named accounts of their own, each with a role that limits what it can do. Nobody at GigSpace signs in as you.

What we do not claim

No badges we have not earned.

GigSpace is a small Irish company. We hold no SOC 2 or ISO 27001 certificate, and we will not dress the page up as if we did. What is on this page is what the product does. If your agency needs something that is not here, ask us and you will get a straight answer.

Found something?

Tell us, and we will thank you.

If you think you have found a security problem in GigSpace, email us with what you saw and how to see it again. A person reads it, and we will tell you what we did about it.

info@gigspace.ie
Book a demo

Or read the legal documents.