Security & Compliance
Clubs trust Waresport with their athletes, families, and finances. Here is how we protect that data — and how we help you stay compliant.
Built on AWS. Encrypted end to end.
Waresport runs on AWS managed cloud infrastructure with automated backups, uptime monitoring, and strict separation between production and non-production environments.
- HTTPS with modern TLS on all trafficEvery connection between your browser and Waresport is encrypted in transit.
- Encryption at rest for databases and file storageStored data is encrypted at the infrastructure level on AWS.
- Least-privilege production accessProduction is accessible only to authorized personnel. Staging and dev use separate data.
Payments handled by Stripe. PCI DSS Level 1.
All card numbers and bank details are collected and stored by Stripe — the highest PCI certification available. Waresport never sees or stores raw card data.
Waresport stores only transaction metadata — amount, status, date, and the last four digits of the card. Full card numbers are never handled by our servers.
Controls for every admin, coach, and staff member.
- Two-factor authenticationAvailable for all admin accounts.
- Role-based access controlAdmins, coaches, staff, and parents each see only what they need.
- Salted password hashesPasswords are never stored in plain text.
- Full communication audit trailEvery message, email, and announcement logged with sender, recipients, and timestamp.
- Audit logs for sign-ins & permissionsKey admin actions are logged and accessible to club admins.
- Sensitive change alertsBank account updates and permission changes trigger automatic notifications.
Waresport helps your club stay compliant — not just protected.
Youth sports clubs carry real compliance obligations — SafeSport alignment, background check tracking, liability waivers, and more. Waresport is built to take those off your plate.
- ✓Mandate any required document across your full roster and staff — background check clearances, SafeSport training certificates, liability waivers, medical forms, or anything else your organization requires.
- ✓Live compliance dashboard: a real-time view of exactly which athletes and staff have completed each requirement and which have not.
- ✓Expiry date tracking with proactive alerts before documents lapse — no more scrambling when a background check quietly expires.
- ✓Liability waivers collected and stored digitally at registration, tied to each member's profile.
- ✓Coaches and staff cannot send direct one-to-one messages to minor athletes outside of group or club-wide channels, in line with U.S. Center for SafeSport guidelines.
Where Waresport stands today.
A plain-language summary of every compliance standard clubs and school districts commonly ask about.
| Standard | Status | Notes |
|---|---|---|
| TLS encryption in transit | ✓ Live | All traffic encrypted with HTTPS / TLS 1.2+ |
| Encryption at rest | ✓ Live | AWS infrastructure-level encryption on databases and file storage |
| PCI DSS Level 1 | ✓ Live | Via Stripe — Waresport never handles raw card data |
| Two-factor authentication (2FA) | ✓ Live | Available for all admin accounts |
| Role-based access control (RBAC) | ✓ Live | Granular permission tiers across admin, coach, staff, parent |
| SafeSport alignment | ✓ Live | Document mandating, messaging restrictions, training cert tracking |
| GDPR principles | ✓ Live | Data export, no data selling, deletion on request |
| Background check ordering (native) | Roadmap | Tracking and mandating already live — in-platform ordering coming |
| SOC 2 Type II | Roadmap | Written security program in place; formal audit in progress |
Who we trust to run the platform.
Waresport is built on best-in-class, independently audited infrastructure providers — not homegrown alternatives.
Your data is yours. Always.
Waresport maintains a written information security program covering risk identification, technical and administrative safeguards, third-party assurances, incident response, and annual program review. SOC 2 certification is on our roadmap. If your organization requires a security questionnaire or evidence package, contact us directly.
Questions clubs ask before signing.
Questions? We're direct.
Found a vulnerability?
Report it privately and we'll respond promptly. All reports are taken seriously.
support@waresport.comSecurity questionnaire?
Enterprise organizations and school districts can request our full security evidence package and complete questionnaire.
Contact our team