Home / Security

Trust & security

Security & reliability

Your budgets, actuals and wrap reports are sensitive — and often live where there's no signal. Here's plainly how we protect them and how the platform keeps working when the connection doesn't.

Protecting your data

Sensible safeguards, by default.

No add-ons, no security tier you have to buy to be safe. Every account gets the same baseline protections.

  • 01

    Encrypted in transit and at rest

    Traffic between your devices and Waveko is protected with TLS, and stored data is encrypted at rest on our infrastructure.

  • 02

    Passwords are hashed

    We never store passwords in plain text. Single sign-on and advanced roles are available on higher plans.

  • 03

    Least-privilege access

    Access to production systems is limited and role-based. We only touch your data to operate, support or secure the service.

  • 04

    Ongoing review

    We review our systems and dependencies regularly and patch promptly as part of normal operations.

Reliability

Built to keep working — and to recover.

Resilience isn't only uptime. On a show floor it means your work survives a dead connection, a flat battery or a bad day on the network.

  • 01

    Offline-first by design

    Your work is written to your device first, so an outage or lost signal never costs you an entry. It syncs automatically the moment a connection returns.

  • 02

    Conflict-safe sync

    Changes are merged per field, not per record, so two people editing the same budget from different corners of the venue both keep their work.

  • 03

    Automated backups

    Synced data is backed up regularly so it can be restored if something goes wrong.

  • 04

    Managed cloud infrastructure

    The platform runs on managed, industry-standard cloud infrastructure with monitoring and redundancy built in.

Ownership & privacy

Your data stays yours.

We don't sell your data, and we don't lock it in. You can export estimates, actuals and wrap reports to PDF and CSV whenever you like, and you can ask us to delete your data.

Waveko is built and operated from the United Kingdom and handled in line with UK GDPR. Where data is processed outside the UK, we put appropriate safeguards in place — such as an adequacy decision or standard contractual clauses. The full detail lives in our privacy policy.

At a glance
Encryptionin transit & at rest
Passwordshashed
Backupsautomated
Data exportPDF & CSV, any time
Data sold to third partiesnever
HandlingUK GDPR-aligned
Responsible disclosure

Found something that looks wrong? Tell us in good faith and we'll work with you.

Report tosecurity@waveko.net
We aim to acknowledgewithin one working day
Report a vulnerability

See something? Let us know.

We welcome reports from researchers and customers. Email the details to our security address and give us a reasonable chance to investigate and fix before any public disclosure. We won't pursue good-faith research that respects our users' privacy and data.

Built to be trusted

Run your shows on a platform that respects your data.

Start free with the production tools, or read exactly how we handle your information in the privacy policy.