Security,

Privacy

& Control

Last updated Sep 6, 2022

Trust is just as important to us as snacks!

Stadium’s magical end-to-end approach to data security, privacy and control means our security infrastructure will safeguard your data.

Powered by innovative technology


We don’t just run on snacks. Here’s what we run on:
Customer Data Protection
  • Encryption In-Transit (TLS 1.2, TLS 1.3)
  • Encryption At-Rest (AES-256)
  • Limited accessibility

Application Protection

  • Web Application Firewall (WAF)
  • Distributed Denial of Service (DDoS) Protections
  • Regular Vulnerability Scanning
  • Half Yearly Penetration Testing
Organizational Security
  • Security Education & Awareness Training
  • 24/7 Monitoring and Incident Response
  • Vendor Risk Management
Infrastructure Security
  • Hosted on a leading cloud infrastructure provider (AWS)
  • Advanced monitoring and control

SOC 2 Type 2 Compliant

GDPR

Disaster Recovery

External Security Assessments

Encryption

99% Uptime

Distributed Denial of Service (DDoS) Protections

It’s all about the bigger picture

We know that when it comes to security, it’s all about the holistic picture. From the tools we use to the features we launch, we consider security and privacy standards (say bye to staying up at night wondering if your data’s safe).

We’ve equipped ourselves with industry-acclaimed tools like sonarqube, AWS config, cloud watch, and docker to make our magic.

Additionally, we don’t build anything new unless it upholds security and privacy standards.

Privacy is just as important as snacks

Whether you’re using Stadium to gift 1 or 5,000+, Stadium takes the same meticulous approach to your data as we do with our snacks! We work diligently to maintain the privacy of data you entrust with us.

Most importantly, data you store in Stadium products is yours. We apply our security protocols for protection and use it only as permitted in our Customer Terms of Use and Privacy Policy. We never share your data with customers and never sell it—we pinky promise on snacks!

Privacy is just as important as snacks

Whether you’re using Stadium to gift 1 or 5,000+, Stadium takes the same meticulous approach to your data as we do with our snacks! We work diligently to maintain the privacy of data you entrust with us.

Most importantly, data you store in Stadium products is yours. We apply our security protocols for protection and use it only as permitted in our Customer Terms of Use and Privacy Policy. We never share your data with customers and never sell it—we pinky promise on snacks!

Compliance no matter where you are

Whether it’s GDPR or similar local regulations, you deserve data privacy, regardless of where you are.

We offer product features like “GDPR delete” that permanently deletes record data, “lawful basis to communicate” consent tracking, subscription settings, and cookie tracking consent banners that are customizable across regions, to make it easy peasy to comply with GDPR and similar regulations.

Compliance no matter where you are

Whether it’s GDPR or similar local regulations, you deserve data privacy, regardless of where you are.

We offer product features like “GDPR delete” that permanently deletes record data, “lawful basis to communicate” consent tracking, subscription settings, and cookie tracking consent banners that are customizable across regions, to make it easy peasy to comply with GDPR and similar regulations.

Secure and magical by design

At Stadium, we add a magical flair to everything we do. We take that same precision and apply it to your customer data!

How, you ask? Well, multiple layers of security are better than one! That’s why we take an extensive approach to implement layers of security throughout our organization. We are also constantly iterating, defining new security controls, and improving our existing ones.

Our security program is powered not only by compliance and regulatory requirements but also by industry best practices.

Secure and magical by design

At Stadium, we add a magical flair to everything we do. We take that same precision and apply it to your customer data!

How, you ask? Well, multiple layers of security are better than one! That’s why we take an extensive approach to implement layers of security throughout our organization. We are also constantly iterating, defining new security controls, and improving our existing ones.

Our security program is powered not only by compliance and regulatory requirements but also by industry best practices.

Questions?

Give us a call and we’ll be happy to help.

Give us a call and we’ll be happy to help.

Data security and privacy that help us deliver magic

Stadium’s platform was built for the magic of gifting. Therefore, it’s important to us that our products provide a safe and trustworthy place for your data, ensuring the best experience. We use the same advanced security measures of secure software development processes, infrastructure management, and alerting methodologies across the entire platform and site. Secure, magical, and trustworthy all over!

1. SECURITY

Keep your data safe and protected from bad actors.

Popular Features

– 
Standard SSL Certificate: Secure your content and lead data with standard SSL on all Stadium-hosted content. It gives your visitors peace of mind, and can also increase visibility in search results.
– Single Sign-On (SSO): Let users sign in to Stadium using single sign-on credentials, making it simple for them to log in while enhancing security and your control over who has access. Visit https://www.bystadium.com/sso for more information.

2. PRIVACY

Manage customer data while being mindful of local regulations.

POPULAR FEATURES

– GDPR Deletion: Permanently delete a contact and prevent accidental recreation.
– Consent and Cookies: Capture a visitor’s consent for cookie tracking, and use different versions of the consent banner depending on page or regional needs.

Information about the subprocessors Stadium uses to support the delivery of our Services can be found in our list of Stadium subprocessors.

Reports

Snack & read up on our data privacy, security, and control
Email us at hi@bystadium.com for more information

Snack & read up on our data privacy, security, and control
Email us at hi@bystadium.com for more information

Snack & read up on our data privacy, security, and control

Email us at hi@bystadium.com for more
information

SOC 2 Type 2 Report

Restricted use report about the security, confidentiality, and availability controls we have in place to protect customer data

Penetration Test Report

Third-party penetration test summary report including testing methodology, high-level findings, and remediation tracking

Frequently Asked Questions

Stadium’s product infrastructure is hosted on Amazon Web Services (AWS) in the United States East region. Stadium products are hosted with cloud infrastructure providers with SOC 2 Type 2 and ISO 27001 certifications, among others.

You bet we do! Stadium has confidential SOC 2 Type 2 reports attesting to the controls we have in place governing the availability, confidentiality, and security of customer data as they map to the TSPs. The report is available upon request at hi@bystadium.com.

Please visit https://www.bystadium.com/sso for detailed information on how to set up SSO.

By Stadium