THE SECURITY YOUR COMMITTEE NEVER HAD
ClubRovia is engineered like a fintech, not a sports app. Stripe Connect for money, Row-Level Security at the database, EU data residency, encryption at rest and a published sub-processor list. Everything a Treasurer, Children's Officer or Chairperson needs to sleep at night.
Platform illustrationThe stack, in plain English
Stripe Connect for money
Funds flow directly to each club's connected Stripe account. ClubRovia never holds your money. PCI-DSS Level 1 by Stripe.
EU-hosted infrastructure
All data, all backups, all logs — stored in the European Union. Encrypted at rest with AES-256 and in transit with TLS 1.3.
Row-Level Security
Postgres RLS policies isolate every club's data at the row level. Database-enforced, not application-enforced.
Role-based access
Granular roles: Admin, Treasurer, Children's Officer, Coach, Member, Parent. Sensitive fields gated by privilege.
Auditable everything
Logins, money movements, vetting changes, message reroutes — all timestamped and tamper-evident.
Published sub-processors
Public, versioned register of every third party that touches your data. DPA available on request.
Compliance posture at a glance
- GDPR (EU 2016/679) — by design
- Irish Data Protection Act 2018 — aligned
- Children First Act 2015 — workflows built in
- National Vetting Bureau Acts 2012–2016
- PCI-DSS Level 1 — via Stripe Connect
- TLS 1.3 in transit, AES-256 at rest
- Daily encrypted backups, 30-day retention
- Tamper-evident audit trail
Frequently Asked
Does ClubRovia hold our club's money?▾
No. Payments flow directly into your club's own Stripe Connect account. We never custody funds — they belong to the club at all times.
Are you ISO 27001 certified?▾
Formal certification is on our roadmap. Our underlying infrastructure providers are SOC 2 / ISO 27001 certified, and ClubRovia's controls are designed to those standards.
Where is the data hosted?▾
All data, including database, backups and logs, is stored in EU regions. No data is transferred outside the European Economic Area.
Who can see my club's data inside ClubRovia?▾
Only support staff with explicit, logged access — and only when a club admin opens a support request that requires it.
Can we request a DPA or security questionnaire?▾
Yes — both are available on request via the Contact page.
Ready to run your club the right way?
No setup fees. No monthly fees. Service fees apply when payments are collected.