Who is responsible for what
For guest data inside an event, the organiser decides why and how it is used, and Sociana processes it on the organiser’s instructions. For enquiries on this website and organiser accounts, Sociana decides. The data protection page explains what that means under India’s Digital Personal Data Protection Act.
Access control
| Role | Can see and do | Typically held by |
|---|---|---|
| Super admin | Platform configuration across organisations | Named Sociana staff |
| Panel admin | Only the events assigned to them, read or read-write | Your team or your agency |
| Owner / manager (in the app) | Event-day tasks: attendance scans, polls, notifications, approving AI summaries | Your event-day staff |
| Guest | Their own profile and arrangements, plus content scoped to their groups | Participants |
| Public web page | Only the no-login polls, voting, leaderboards and posts you choose to publish | Anyone with the link or QR |
Logins against your guest list
Guests sign in with a one-time password by phone, email or WhatsApp, an employee code and password, a delegate ID and PIN, or an allowed company email domain. Anyone who is not on your list sees an access-not-available screen instead of your content.
Content scoped by group
Partners, employees, delegates or the two sides of a wedding can each see their own agenda, notices, polls, chat and leaderboards. Scoping is set in the admin panel, so a change applies to everyone in the group at once.
Payments
Ticket and booking payments go through Razorpay’s checkout. Card and UPI details are entered there, not in Sociana.
How the platform is built
React and TypeScript apps for iOS and Android, a Rails backend, Google Firebase and Cloud Firestore, and web pages hosted on Vercel. This website runs on Cloudflare. Enterprise plans can run on your servers or in a region you choose.
What Sociana does not offer
- SOC 2 or ISO/IEC 27001 certification. Sociana does not hold either. We answer security questionnaires in full and can walk your IT team through our controls under NDA.
- India-only data hosting by default. The apps run on Google Firebase and cloud hosting. Enterprise plans can run on your servers or in a region you choose.
- A platform-wide uptime percentage. Event-day support levels are written into each order instead.
- SAML single sign-on or SCIM. Guests sign in by OTP, employee code, delegate ID and PIN, or an allowed company email domain.
- A public API or Zapier app. Data goes out through exports, Google Sheets, Airtable and webhooks.