Implemented application controls
The application provides tenant and role checks, password hashing, optional MFA, session controls and audit records. Configured integration credentials are encrypted. Organizer-approved diagnostic support is scoped and time-limited.
These controls are not an independent security certification. Production hosting, HTTPS, key management, backups, access provisioning and provider callbacks must be configured and tested before live use.
Protecting event operations
Treat private ticket QR links as credentials. Allocate minimum necessary volunteer roles, secure shared devices, and confirm outcomes before repeating an interrupted payment or entry action.
The app requires server confirmation for operational changes. It does not promise offline entry or offline redemption. Server capacity and actual phones/printers must be checked for the planned event.
Reporting a vulnerability or incident
Email events@adaccurate.in with the subject “AccurateEvents security report”, a description, affected page and safe reproduction steps. Do not access other organizers’ data, disrupt service or include secrets in an initial report.
This page is not a bug-bounty agreement and does not promise a reward or a fixed incident response time. A production incident-response and escalation procedure remains a launch requirement.
Accessibility approach
The public pages use labelled controls, keyboard-operable navigation, visible focus styles and layouts for smaller screens. Product illustrations have descriptive text, and the page avoids automatic video playback.
This is not a WCAG certification. If you encounter a barrier, tell us the page, device/browser and the action you could not complete. We will review an accessible alternative with you.