VenueScan is built on the principle that venue data belongs to the venue. Here's how we keep it safe.
Sign-in rules force venues to collect personal information, and most systems keep far more of it than they need to. VenueScan is designed to minimise unnecessary PII collection to protect your patrons.
ID scanning and data extraction happens entirely on the terminal. Raw ID images are never transmitted to our servers.
Sensitive information like driver licence numbers and card numbers is never collected or stored. Your visitor records contain only the essentials. See exactly what we collect in our data collection reference.
Records are deleted automatically when their retention period ends, so your venue never holds patron data for longer than it needs to.
Patron data and sign-in records are sensitive, so we host everything in Australia and encrypt it the whole way through.
All data is hosted on Amazon Web Services in the Sydney (ap-southeast-2) region. Your data never leaves Australian soil.
All stored data is encrypted at rest using AES-256, the same encryption standard used by financial institutions and defence organisations.
Data moving between your terminals, the dashboard and our servers is encrypted with TLS 1.3, the latest version of the protocol.
The people most likely to see your data are your own staff. So we put a lot of work into letting you decide exactly who can do what, and keeping a record of it.
Sign in to the dashboard with Face ID, Touch ID or Windows Hello. There's no password to steal, guess or reuse.
Assign roles to staff members to control who can view entry records, manage settings, or administer the account. Learn more in our members and roles guide.
Track every change across your venue: settings updates, entry modifications, ban activity, and more. Audit logs are retained for 1 year. See our audit logs guide.
Dashboard sessions end automatically after a period of inactivity, so a computer left at the front desk doesn't stay signed in.
You're notified whenever your account is signed in to from a new device, so anything unexpected stands out straight away.
VenueScan does not own, sell, or access your venue's data. You retain full ownership and control at all times, with the ability to export everything whenever you need to.
Export your full dataset at any time, in any format. If you ever leave VenueScan, your data leaves with you. Learn more in our data export guide.
Every venue's data is kept separate from every other venue's. Your records are accessible only to your authorised users.
Personal information is handled in accordance with the Australian Privacy Principles under the Privacy Act 1988 (Cth).
We publish every third party that helps us run VenueScan, and where they're located. See our sub-processors list.
VenueScan is architected for high availability with automated monitoring, daily backups, and offline resilience.
Automated daily backups retained for 7 days, stored within AWS's Sydney region.
Terminals continue operating during internet outages. Records are stored locally and synced automatically when connectivity is restored. Learn more in our offline mode guide.
Real-time system monitoring publicly available at status.venuescan.com.au
We monitor your systems around the clock and resolve issues before they reach your front door.
Our team is happy to walk through our security practices in detail and answer any questions your venue may have.
How we collect, use and protect personal information under the Australian Privacy Principles.
Read the privacy policyExactly what VenueScan stores for each sign-in, and how long it's kept.
See what we collect