Security and trust
See how Conectus handles sponsors' money and data, with a clear account of what the code and configuration do today. Where an answer needs a conversation, this page tells you to contact us.
Each organisation sees only its own events
Every query is scoped to the organisation and the event it belongs to, and several separate guards enforce that.
- Every organiser action first checks that the signed-in person belongs to the organisation that owns the event.
- Role checks (owner, admin, staff) apply to organisation actions. Someone who is not a member is told "not found", so the page does not reveal whether an organisation exists.
- Participants see only their own records, and an archived event refuses access.
- Row-level security is switched on, and forced, on every table that holds an event's data. Signed-in users get read access at most; every write goes through the server.
- A record cannot be moved to another organisation or event after it is created.
- Our automated checks fail the build if a server query on one of those tables is not scoped to the event.
Agents propose. People approve.
An agent's proposal does nothing until an admin approves it, and the approver is recorded with it.
- Agents' emails wait for your yes. Scheduled reminders run once you switch them on, and you see every send in the activity feed.
- An agent cannot send a campaign. Its tool only returns a proposal that needs approval.
- Every proposal stores the state before the change, which is what Undo restores.
The preview cannot send or charge
See exactly what a sponsor or speaker sees in their portal. “Viewing as” gives organisers that view with nothing able to go out.
- In the preview, proposals, agenda edits, imports, the agent gateway, settings and email all refuse to run.
- The preview is tied to one event, uses a signed cookie, expires, and fails closed if anything about it cannot be checked.
Every action is recorded, with who did it
Each entry says whether a person or an agent acted and, for an agent, which one and in which run.
- The audit log is append-only: update, delete and truncate are refused for every role, including the server's own.
- Each agent proposal records who approved it, so any change traces back to the person who said yes.
Sign-in and email protections
See what protects accounts and keeps sending safe.
- Sign-in is by email link or LinkedIn. There are no passwords.
- The sign-in screen gives the same answer, in the same time, whether or not an address has access.
- Sign-in links are rate limited per address, and no email is sent if the limit cannot be checked.
- Invite tokens are stored hashed.
- Email delivery notifications are signature-checked and rejected when the signature fails.
- Email is never sent to a suppressed address, and a send is blocked if the suppression list cannot be read.
- Scheduled jobs check a secret before they run.
Where it runs
The application is served from Vercel's Frankfurt region.
- That is the one hosting fact we state here. For anything else about where your data is stored, contact us.
Your data
The protections above cover who can read and change your event's data.
- To ask for a copy of your data, a correction or a deletion, contact us at hello@conectus.tech.
- For the details this website holds when you send an enquiry, see the privacy page.
Report a security concern
If you think you have found a weakness, tell us first.
- Email hello@conectus.tech with what you found and how to reproduce it. Please do not access other people's data while you test.
Make an enquiry or book a walkthrough
See your event's website take shape as you type, in the designs Wendy creates. We'll reply by email and arrange a walkthrough call if you ask.