Security and compliance

ShowTix4U doesn't complete individual security audit forms. We can refer you to our Terms of Service and Privacy Agreement. 

ShowTix4U does not store, process, or transmit credit card data and is PCI Compliant (SAQ-A attached). ShowTix4U uses carrier grade data centers and processor (AWS, Stripe, Bill.com) that meet the following certifications:

• PCI-DSS Level 1 Service Provider
• SOC 1 Type II and SOC 2 Type II
• ISO 27001

Security

• ShowTix4U is scanned quarterly by a Approved Scanning Vendor (securitymetrics.com)
• ShowTix4U utilizes credit card tokenization for minimizing risk related to cardholder data.
• We do not sell personal information of our customers to third parties.

Development

• ShowTix4U software engineers receive software security training that covers security best practices.
• ShowTix4U uses static code analysis tools to analysis code for security vulnerabilities.
• A software and security code review before being shipped to production.
• Running through a continuous integration test suite.
• Manual QA testing.

Encryption

• All web traffic is encrypted by TLS 1.2 or greater.
• ShowTix4U follows recommendations for hashing, symmetric and asymmetric encryption.

If you are unable to proceed using our service for any reason, please note it is possible to use just the streaming side of ShowTix4U and use a third party system or manual process for monetization. To learn more about using just the streaming side of ShowTix4U visit: Arts Organization > I already have a box office program. How can I use ShowTix4U for just streaming my events?