Security
Updated 2026-10-30
This page describes implemented access safeguards. It is not a guarantee against every security risk.
Authentication
Phone OTP login. Session cookies over HTTPS. No passwords stored.
QR security
Arrival and team QR codes are checked against the applicable permissions and check-in window. An invitation QR opens an invitation and does not record attendance.
Report a vulnerability
Email security@showupat.com with responsible disclosure details.