Your event operations. Protected.
CueKit takes a layered approach to protecting your event operations, workspace access, and customer information — from sign-in, to the database, to the files your team uploads. This page explains how, in plain language, using only what we've verified in the product itself.
Security at a glance
Access Controls
Workspace roles and per-event assignments control exactly who can see and change each event.
Event Data Isolation
Every workspace and event is isolated at the database level, so one customer's information is never visible to another.
Authentication Security
Managed authentication with email confirmation and trusted sign-in providers protects every account.
Monitoring & Ongoing Improvements
Production error monitoring and a continuing security review program keep protections current.
How CueKit protects information
Organization and event access controls
Each CueKit workspace is separate. Members can only see the workspaces they belong to, and workspace Owners and Admins can further restrict team members to specific events. When access is removed, it takes effect across the app.
Workspace roles and permissions
Every member has a role — Owner, Admin, Planner, Production, or Viewer — with least-privilege permissions. Billing and team administration are limited to Owners and Admins, and Viewers are read-only.
Database row-level security
Authorization is enforced by the database itself, not just the application. Row-level security policies on CueKit's tables check workspace membership, role, and event assignment on every request.
Authentication and account protection
Sign-in is handled by a managed authentication service with email confirmation, plus trusted sign-in providers. Passwords are managed by the authentication provider. Complimentary access codes are stored only as hashes and shown once at creation.
File and operational information access
Event files live in private storage and are served through short-lived signed links. Speaker portals and shared staff schedules use unique, unguessable links, and shared schedules are read-only. Archived events become read-only for everyone.
Infrastructure & data handling
CueKit runs on managed cloud services that provide application hosting, the database, authentication, and file storage. These providers process information only as needed to operate the service, and are subject to contractual obligations or their own terms and privacy practices.
Payments for paid subscriptions are processed by Stripe. CueKit does not store complete payment-card numbers. Customers retain ownership of the event content they enter or upload, as described in our Privacy Policy.
We describe infrastructure only where we have verified the facts. We don't claim specific hosting regions, data-residency guarantees, backup schedules, or provider certifications we haven't confirmed.
Security monitoring
CueKit maintains production error monitoring so problems are detected and diagnosed quickly. Before any error information is recorded, sensitive values — tokens, email addresses, keys, and similar data — are automatically removed.
Security work is ongoing: we review the product against recognized security practices, fix what we find, and verify fixes before they ship. Some monitoring coverage is still being verified and expanded, and we'll keep this page current as that work completes.
Frequently asked questions
Who can access my organization's event information?
Only members of your workspace, according to their role and any event assignments your Owners and Admins set. Authorized 42Ten Media personnel may access information only when needed for support, security, administration, or service operations.
Can another CueKit customer see our information?
No. Workspaces are isolated from each other, and that isolation is enforced by row-level security in the database — not just by the application interface. One customer's events, files, and contacts are never visible to another customer.
How does CueKit protect user accounts?
Sign-in is handled by a managed authentication service with email confirmation. You can also sign in with trusted providers. Passwords are managed by the authentication provider, and CueKit never displays account credentials.
What types of event information does CueKit store?
Whatever your team enters or uploads: programs and schedules, run-of-show cues, speaker information, rooms and places, contacts, staff schedules, deadlines, logistics, files, and production notes. You control what goes into your workspace.
How does CueKit approach security monitoring?
CueKit maintains production error monitoring that automatically removes sensitive values — such as tokens, email addresses, and keys — before anything is recorded. We also review and ship security improvements on an ongoing basis. Verification of monitoring coverage is continuing, and we expand it as the product grows.
Is CueKit SOC 2 certified?
No. CueKit is not SOC 2 certified or audited. We are undertaking security readiness and control documentation work, and this page reflects only protections we have verified in the product itself.
Who can I contact with security questions?
Email us at hello@cuekit.live. Customers and IT reviewers are welcome to ask about any practice described on this page.
Security questions?
Customers, event planners, and IT reviewers can reach us at hello@cuekit.live. You can also review our Privacy Policy and Terms of Service, or use our contact page.