Sweden Central
Microsoft Azure, in Sweden
- The app: this website, the workspace, the event app and the service behind them
- The database
EU sovereignty
Your event's data is kept in the EU
AttendBeacon runs in Microsoft Azure data centres in the EU. This page says exactly where, which companies handle your event's data, and the few things that leave the EU, and why.
Where it runs
Two Azure regions, both in the EU
AttendBeacon is hosted in two Microsoft Azure regions in the EU. Microsoft is a US company; we use the EU regions of Microsoft Azure.
West Europe
Microsoft Azure, in the Netherlands
- Uploads and photos (blob storage)
- Key Vault, for the keys and secrets
- Logs and monitoring
- The container registry, which holds the app's builds
Hosting
AttendBeacon runs in Microsoft Azure data centres in the EU. The app and the database run in Sweden Central, in Sweden. Uploads and photos (blob storage), Key Vault, logs and monitoring, and the container registry are in West Europe, in the Netherlands.
Emails are sent through Azure Communication Services, with its data location set to Europe. Once an email is delivered, it is kept by the recipient's own mail provider.
AI features
AI features use Azure OpenAI in the EU Data Zone, so the processing stays within the EU. They are optional, and organisers can switch them off. What each feature sends is on the privacy page.
Payments
Ticket payments go through the organiser's own Mollie account. Mollie is a Dutch company. Stripe is optional.
Signing in
Organisers sign in with Microsoft Entra ID, using their work account. Attendees sign in with a code sent by email; they have no password.
No Google Fonts, no trackers
Fonts are self-hosted on our own servers, so opening a page sends no request to Google. There are no analytics or tracking scripts on this site, in the workspace or in the event app.
Who processes the data
Two companies process data for AttendBeacon:
- Microsoft: hosting, email and AI
- Mollie: payments, on the organiser's own account
What leaves the EU, and why
Some things go beyond our hosting in the EU, because of how phones, wallets and email work, or because of who our processors are:
- Push messages pass through the push service of the browser's maker: Apple, Google or Mozilla. They are encrypted end to end, so the push service can't read them.
- Wallet passes are stored by Apple or Google, only when an attendee adds one to their wallet.
- Emails end up at each recipient's own mail provider, wherever that provider keeps them.
- Our processors are Microsoft and Mollie. Microsoft is a US company: we use the EU regions of Microsoft Azure, and a US company can be subject to US law. We make no claim that your data is out of reach of foreign law.
More
What is stored about attendees and organisers, and for how long, is on the privacy page. For questions, see support.