Trust & Security
We protect the data you and your attendees trust us with, so you can focus on running great events.
Network Security
We work continuously to keep our infrastructure and your data secure.
Our core infrastructure providers — Google Cloud, Cloudflare, and DigitalOcean — are independently certified to ISO 27001 and SOC 2. All sub-processors are bound by data processing agreements, and our full sub-processor list, including data locations and transfer safeguards, is published at hifredo.com/subprocessors.
Our core infrastructure and customer data are hosted within the EU (Belgium and Germany). A limited set of supporting services process data outside the EU under recognised transfer safeguards — see our sub-processor list for details.
Access to customer data is protected with two-factor authentication where supported, and limited to staff who need it.
Data Security
Protecting customer data is central to how we operate. Our measures include:
Our core infrastructure is certified to ISO 27001 and located within the EU. See our sub-processor list for the full picture, including data locations and transfer safeguards.
Data is encrypted both in transit and at rest, using industry-standard encryption.
Attendee personal data is deleted automatically 60 days after each event, and customers can request earlier deletion at any time.
Fredo is GDPR-compliant. We process personal data in line with European data protection law, maintain a clear privacy policy, and enter into data processing agreements with our customers. We don't sell your data, we only process it to deliver our service.
Operational Security
Keeping data safe is part of how the whole team works, not an after thought.
We maintain a plan for identifying and responding to security incidents, so we can act quickly if something goes wrong.
Security is embedded across our team, with clear ownership of monitoring and responding to potential issues.
Questions about Fredo's security?
Get in touch with Fredo Privacy & Compliance - security@hifredo.com
