Your own deployment
Each client runs on its own deployment with its own database. Your fair’s records are never stored alongside another client’s.
Security
Your fair’s records stay yours.
Applications, contracts, guest lists and sales are some of the most sensitive records a fair keeps. This is how we look after them.
Two-step sign-in
Admins must sign in with an authenticator app. Passwords are at least 10 characters and are stored only as a one-way hash by our authentication provider.
Roles that fit the work
Fair admins, staff scoped to specific fairs, gallery admins and gallery members each see only what their role needs.
Every act-as is logged
When your staff work on a gallery’s behalf, the platform records who did what, for whom and when.
Card details never reach us
Payments go through Stripe. Card numbers are entered on Stripe and never touch mostrale’s servers.
Private files stay private
Uploads are stored in private buckets and opened through short-lived signed links.
Encrypted in transit
Every page and API call is served over HTTPS, and database connections use verified TLS.
Your data leaves with you
Applications, submissions and orders export to Excel, CSV and ZIP whenever you need them.
Found a security issue? Write to hello@mostrale.com with “Security” in the subject. See also our privacy notice.