Trust at Waresport
Security & Compliance
Clubs trust Waresport with their athletes, families, and finances. Here is how we protect that data — and how we help you stay compliant.
AWS Cloud InfrastructureStripe PCI DSS Level 1SafeSport AlignedSOC 2 on Roadmap
Platform security
Built on AWS. Encrypted end to end.
Waresport runs on AWS managed cloud infrastructure with automated backups, uptime monitoring, and strict separation between production and non-production environments.
- HTTPS with modern TLS on all trafficEvery connection between your browser and Waresport is encrypted in transit.
- Encryption at rest for databases and file storageStored data is encrypted at the infrastructure level on AWS.
- Least-privilege production accessProduction is accessible only to authorized personnel. Staging and dev use separate data.
Financial data
Payments handled by Stripe. PCI DSS Level 1.
All card numbers and bank details are collected and stored by Stripe — the highest PCI certification available. Waresport never sees or stores raw card data.
PCI DSS Level 1
Waresport stores only transaction metadata — amount, status, date, and the last four digits of the card. Full card numbers are never handled by our servers.
How payments work on Waresport
Registration fees, membership billing, event payments — see how Stripe powers the full financial layer.
Account security
Controls for every admin, coach, and staff member.
- Two-factor authenticationAvailable for all admin accounts.
- Role-based access controlAdmins, coaches, staff, and parents each see only what they need.
- Salted password hashesPasswords are never stored in plain text.
- Full communication audit trailEvery message, email, and announcement logged with sender, recipients, and timestamp.
- Audit logs for sign-ins & permissionsKey admin actions are logged and accessible to club admins.
- Sensitive change alertsBank account updates and permission changes trigger automatic notifications.
Safeguarding & compliance
Waresport helps your club stay compliant — not just protected.
Youth sports clubs carry real compliance obligations — SafeSport alignment, background check tracking, liability waivers, and more. Waresport is built to take those off your plate.
- ✓Mandate any required document across your full roster and staff — background check clearances, SafeSport training certificates, liability waivers, medical forms, or anything else your organization requires.
- ✓Live compliance dashboard: a real-time view of exactly which athletes and staff have completed each requirement and which have not.
- ✓Expiry date tracking with proactive alerts before documents lapse — no more scrambling when a background check quietly expires.
- ✓Liability waivers collected and stored digitally at registration, tied to each member's profile.
- ✓Coaches and staff cannot send direct one-to-one messages to minor athletes outside of group or club-wide channels, in line with U.S. Center for SafeSport guidelines.
Coming next: Native background check ordering directly inside Waresport — initiate, track, and renew checks without leaving the platform. Get early access
Standards & certifications
Where Waresport stands today.
A plain-language summary of every compliance standard clubs and school districts commonly ask about.
| Standard | Status | Notes |
|---|---|---|
| TLS encryption in transit | ✓ Live | All traffic encrypted with HTTPS / TLS 1.2+ |
| Encryption at rest | ✓ Live | AWS infrastructure-level encryption on databases and file storage |
| PCI DSS Level 1 | ✓ Live | Via Stripe — Waresport never handles raw card data |
| Two-factor authentication (2FA) | ✓ Live | Available for all admin accounts |
| Role-based access control (RBAC) | ✓ Live | Granular permission tiers across admin, coach, staff, parent |
| SafeSport alignment | ✓ Live | Document mandating, messaging restrictions, training cert tracking |
| GDPR principles | ✓ Live | Data export, no data selling, deletion on request |
| Background check ordering (native) | Roadmap | Tracking and mandating already live — in-platform ordering coming |
| SOC 2 Type II | Roadmap | Written security program in place; formal audit in progress |
Infrastructure & vendors
Who we trust to run the platform.
Waresport is built on best-in-class, independently audited infrastructure providers — not homegrown alternatives.
Amazon Web Services (AWS)Compute, storage, and database hosting. ISO 27001, SOC 2, and PCI certified. All data remains in AWS-managed datacenters.
StripeAll payment processing. PCI DSS Level 1 certified — the highest available for card data. Waresport servers never touch raw card numbers.
Twilio / SendGridTransactional email and SMS delivery for notifications, receipts, and club communications.
CloudflareDDoS mitigation, DNS, and CDN for static assets. Reduces attack surface at the network edge before requests reach application servers.
Data ownership
Your data is yours. Always.
Full export anytimeMember lists, registration data, payment history, and schedules — exportable whenever you need them.
Free migration outIf you ever leave Waresport, we migrate your data out at no charge. No lock-in.
Never soldWe do not sell your club's data or your members' personal information to any third party.
Roadmap
Waresport maintains a written information security program covering risk identification, technical and administrative safeguards, third-party assurances, incident response, and annual program review. SOC 2 certification is on our roadmap. If your organization requires a security questionnaire or evidence package, contact us directly.
Frequently asked questions
Questions clubs ask before signing.
- Waresport has built-in compliance tracking that lets clubs mandate background check clearance certificates as required documents. Every staff member and coach's background check status is tracked in the platform, with expiry alerts before renewals are due. Native background check ordering directly inside Waresport — no third-party portal — is on our near-term roadmap.
- Yes. Clubs can mandate SafeSport training certificate uploads for all coaches and staff, track completion status in real time, and receive alerts before certificates expire. The platform also enforces SafeSport communication guidelines by preventing coaches and staff from sending direct one-to-one messages to minor athletes outside of group or club-wide channels.
- All Waresport data is stored on AWS (Amazon Web Services) managed cloud infrastructure. Data is encrypted at rest using AWS-native encryption and in transit using TLS. Production environments are strictly isolated from staging and development environments, and production access is limited to authorized personnel only.
- Yes. All payment processing is handled by Stripe, which holds PCI DSS Level 1 certification — the highest level available. Waresport never stores or transmits raw card data. Only transaction metadata (amount, date, status, and the last four digits of the card number) is stored on Waresport servers.
- Waresport is built with GDPR principles throughout: member data is exportable on request, data is never sold to third parties, and deletion requests are honored. Clubs in the EEA or UK can request our data processing agreement (DPA) by emailing support@waresport.com.
- SOC 2 Type II certification is on Waresport's roadmap. We maintain a written information security program covering risk management, technical and administrative controls, vendor assurances, and incident response procedures. Organizations that require a security questionnaire or evidence package in the meantime can contact support@waresport.com.
- Yes, and without charge. Member lists, registration data, payment history, and schedule data are all exportable at any time from your admin dashboard. If you ever decide to leave Waresport, we handle your full data migration at no cost. There is no lock-in.
- Waresport maintains a written incident response plan. In the event of a confirmed breach affecting customer data, affected clubs are notified directly and promptly. Sensitive changes — such as bank account updates or permission escalations — automatically trigger real-time alerts to admins. Suspected vulnerabilities can be reported to support@waresport.com.
Get in touch
Questions? We're direct.
Found a vulnerability?
Report it privately and we'll respond promptly. All reports are taken seriously.
support@waresport.comSecurity questionnaire?
Enterprise organizations and school districts can request our full security evidence package and complete questionnaire.
Contact our team