Security
Security is an ongoing part of running Draxivo. These are the protections currently built into the platform.
Secure connections
Draxivo is served over HTTPS so account, checkout and dashboard traffic is encrypted in transit.
Account authentication
Accounts and sessions are handled through Supabase Auth, with server-side checks on protected organiser and admin actions.
Scoped organiser access
Organiser actions are checked against event ownership, and database row-level security restricts access to organiser data.
Payment verification
Paid tickets are issued only after Draxivo verifies the Paystack transaction and validates its reference, amount and currency.
Ticket validation
Tickets use unique codes and server-side validation to prevent the same ticket from being accepted twice.
Report a security issue
If you notice suspicious behaviour or a possible vulnerability, contact Draxivo so it can be investigated quickly.
Found a security issue? Report it