WaiveGO is currently invite-only.Request a demo to ask about joining →
WaiveGO
Security

Built Like the Records Matter. Because They Do.

Waivers hold your guests' personal details, their children's names and a signed legal agreement. Here's how WaiveGO protects them, in plain terms, with the technical details for your IT team.

Encrypted
Guest details and signatures
Sealed
A digital seal on every waiver
Two-Step
Required for every staff sign-in
Backed Up
Nightly, encrypted and tested

Guest Details Stay Private

Personal details are encrypted the moment they're saved, so they're unreadable to anyone without access.

  • Contact details, birthdays, addresses, children's details, signatures and photos are all encrypted.
  • Staff can still look a guest up by email or phone, without those details ever being stored in readable form. Only the signing adult's name is kept readable, so your team can find a waiver by name.
  • Every connection to WaiveGO, from browsers and kiosks alike, is encrypted too.
For Your IT Team: AES-256-GCM field-level encryption · keyed SHA-256 lookups for email and phone · HTTPS (TLS) on every connection

Every Waiver Is Sealed

You can show that a signed waiver hasn't changed, even years later.

  • The moment a waiver is signed, WaiveGO seals the full record, including the exact wording the guest agreed to.
  • Each waiver is also linked to the one before it, so if a record were ever changed, removed or reordered, it would show.
  • Every waiver has its own verification code that ties a printed copy or PDF back to the sealed original.
For Your IT Team: SHA-256 fingerprint of each record · Ed25519 digital signature · hash-chained ledger

Only Your Team Gets In

The portal holds guest data, so getting in takes more than a password.

  • Every staff and manager account needs a password and a code from their phone. It can't be switched off, and backup codes cover a lost phone.
  • Repeated wrong codes or passwords slow the account down, so guessing doesn't work.
  • There's no public sign-up. You invite each person, and turning someone's account off signs them out everywhere straight away.
For Your IT Team: Required TOTP two-step verification · rate-limited sign-in · bcrypt password hashing · 10-character minimum

Everyone Sees What Their Job Needs

Managers and front-gate staff have different jobs, and different access.

  • Admins manage people, kiosks and settings. Front-gate staff work with waivers, templates and check-ins.
  • You're never locked out: WaiveGO always keeps at least one active admin on your account.
For Your IT Team: Role-based access control · the last active admin can't be removed or deactivated

Kiosks You Control

Only kiosks your team sets up can connect, and you can cut one off at any time.

  • Each kiosk is set up once, on purpose, by someone signed in to your portal.
  • If a kiosk is lost or retired, switch it off from the portal and it can no longer connect.
  • The staff side of every kiosk has its own passcode, with limits on wrong tries.
For Your IT Team: One-time pairing codes · a unique device key per kiosk, stored only as a hash · passcode lockout

Face Check-In Respects Privacy

WaiveGO Express is opt-in, kept private and easy to undo.

  • A face is saved only when the guest agrees on their waiver. Everyone else checks in by QR code or name.
  • Faces stay inside WaiveGO. They're never shared with an outside face recognition company, sold, or used for anything but checking that guest in.
  • Faces are stored encrypted with the guest's waiver, deleted along with it, and can be removed by your team at any time.
  • If a match is unclear, a team member decides, and every Express check-in is logged.
For Your IT Team: Matching runs on WaiveGO's own servers · encrypted photo and face template · enrollments, removals and check-ins logged

Every Action Is Recorded

An activity log shows who did what, and when.

  • Sign-ins, check-ins, voided waivers, PDF downloads, exports, kiosk changes and account changes are all recorded.
  • Admins can review the log at any time from the portal.
For Your IT Team: Audit log of staff, kiosk and account activity, with the person and time for each entry

Backed Up Every Night

Your records are safe even if a server isn't.

  • Your data is backed up every day by our database provider and again every night to separate storage.
  • Backups are encrypted, and we test restoring them every week.
For Your IT Team: Managed PostgreSQL with daily backups and point-in-time restore · nightly encrypted off-site copies · weekly restore tests

Questions from Your Security or Legal Team?

We’re glad to walk through how WaiveGO handles data in more detail, or to look into a security concern you’ve found. Write to hello@waivego.com.

Invite Only

Put a Secure Waiver System at Your Gate.

Shorter lines, less paperwork and waivers you can count on. WaiveGO is currently invite-only: request a demo and we'll walk you through it and talk about bringing your venue on.