🔒 Security, Privacy & Data Protection
How LeaguEvo protects your organization's data, ensures regulatory compliance, and gives members control over their personal information.
Security Architecture
Enterprise-Grade Security by Default
🔐
OAuth2 / OIDC Authentication
Industry-standard single sign-on with multi-factor authentication support. No passwords stored in LeaguEvo.
🏢
Multi-Tenant Data Isolation
Every organization's data is fully isolated. Cross-tenant access is blocked by architecture — not just policy.
🛡️
Role-Based Access Control (RBAC)
Hierarchical roles: Super Admin → Org Admin → League Admin → Club Admin → Team Captain → Player. Least-privilege by default.
📋
Policy-Based Authorization
Sensitive data access is controlled by role, org type, team assignment, consent status, classification, and purpose.
🔍
Full Audit Trail
Every sensitive action is logged with who, what, when, and before/after values. Exportable for compliance reviews.
🔑
Encryption at Rest & in Transit
All data encrypted in transit (TLS 1.3). Emergency contacts, medical info, and restricted fields encrypted at rest.
Privacy & Consent Management
Privacy Center — Member View
✅
Privacy Policy Accepted
Version 2.1 — Accepted March 1, 2026
✅
Photo Release Consent
Granted — Match photos and social media use permitted
⚙️
Communication Preferences
Email: Match updates, Payment reminders · SMS: Disabled · Marketing: Opt-out
📥
Download My Data
Request a full export of your personal data stored in LeaguEvo
🗑️
Delete My Data
Request deletion of personal data (subject to legal retention requirements)
💡 Privacy Rights
LeaguEvo supports data download, deletion requests, consent management, communication preferences, and marketing opt-out — designed to meet CCPA/CPRA and Texas privacy law requirements from day one.
Data Classification & Protection Levels
| Classification | Examples | Access Control | Encryption | Audit |
|---|---|---|---|---|
| Public | Team name, match scores, standings | Anyone | In transit | No |
| Internal | Player roster, schedule drafts | Authenticated members | In transit | Changes only |
| Confidential | Financial records, board minutes, sponsor agreements | Role-restricted (Officers, Treasurer) | At rest + transit | All access |
| Sensitive | Emergency contacts, payment details, parent/guardian info | Policy-based (need + role + consent) | At rest + transit | All access + views |
| Restricted | Medical records, background checks, concussion history | Explicit authorization required | At rest + transit + field-level | All access + views + exports |
Youth Participant & Parent/Guardian Protection
COPPA-Compatible Safeguards
Parent/Guardian Controls
✅ Parent/guardian as primary account holder for youth under 13
✅ Parental consent required before creating child profiles
✅ Parent controls communication preferences for minors
✅ Emergency contacts encrypted at rest, audit-logged on view
✅ Pickup authorization tracking for youth events
✅ Parent can download or request deletion of child's data
✅ Parental consent required before creating child profiles
✅ Parent controls communication preferences for minors
✅ Emergency contacts encrypted at rest, audit-logged on view
✅ Pickup authorization tracking for youth events
✅ Parent can download or request deletion of child's data
Access Restrictions
🔒 Only assigned coaches/captains see youth player details
🔒 Medical/injury info requires explicit policy authorization
🔒 Background check records: restricted classification
🔒 No marketing communications to youth without consent
🔒 AI agents cannot access restricted youth data
🔒 All youth data views create audit entries
🔒 Medical/injury info requires explicit policy authorization
🔒 Background check records: restricted classification
🔒 No marketing communications to youth without consent
🔒 AI agents cannot access restricted youth data
🔒 All youth data views create audit entries
Regulatory Compliance Readiness
CCPA / CPRA
Ready
Privacy rights, opt-out, deletion
Texas Privacy
Ready
Consent, access, portability
PCI DSS
Compliant
No card data stored
COPPA
Supported
Parent-first consent model
FERPA
Available
School/district mode
SOC 2
On Track
Audit + access evidence
WCAG 2.2 AA
Target
Accessibility-first UI
501(c)(3)
Built-in
Form 990 readiness
| Regulation | What LeaguEvo Does | Your Benefit |
|---|---|---|
| CCPA / CPRA | Data download, deletion requests, consent records, opt-out workflows, communication preferences | Members can exercise privacy rights directly from their profile |
| PCI DSS | Hosted payment flows via Stripe — card numbers, CVV, and expiration never touch LeaguEvo servers | Zero PCI scope for your organization. Only payment IDs and receipt URLs stored. |
| COPPA | Parent/guardian-first accounts, verified consent before child profile creation, restricted marketing | Youth programs can operate safely with proper parental controls |
| FERPA | School-controlled access, audit trails, retention policies, parent access rights, export controls | School and district deployments meet educational privacy requirements |
| 501(c)(3) / IRS | Board records, meeting minutes, donation tracking, Form 990 readiness checklist, UBIT risk flagging | Nonprofits stay organized for annual filings and potential audits |
Payment Security
PCI DSS Scope Reduction
❌ Never Stored in LeaguEvo
• Credit/debit card numbers
• CVV / security codes
• Card expiration dates
• Bank account numbers
• Routing numbers
• CVV / security codes
• Card expiration dates
• Bank account numbers
• Routing numbers
✅ What We Store
• Stripe customer ID
• Payment intent / charge ID
• Invoice reference
• Receipt URL
• Transaction amount and status
• Payment intent / charge ID
• Invoice reference
• Receipt URL
• Transaction amount and status
All payment processing happens through Stripe's PCI-certified hosted flows. Webhook processing is idempotent — no duplicate charges. Refunds follow a two-step approval process with full audit trail.
Data Retention & Lifecycle
| Data Type | Retention Period | After Expiry | Configurable |
|---|---|---|---|
| Registration records | Duration of membership + 3 years | Anonymized | ✅ By org |
| Payment records | 7 years (IRS requirement) | Archived | ❌ Legal min |
| Match scores & stats | Indefinite | Public record | ✅ By league |
| Emergency contacts | Active season only | Deleted | ✅ By org |
| Waivers | Duration of participation + 5 years | Archived | ❌ Legal min |
| Audit logs | 3 years minimum | Archived | ✅ Extend only |
| Board minutes / compliance docs | Permanent (nonprofits) | Retained | ❌ Legal req |
| Messages & notifications | 1 year | Deleted | ✅ By org |
✅ Key Principle
Data retention policies are configurable per organization type where legally appropriate. Legal minimums cannot be shortened. Organizations can always extend retention beyond the default.
Infrastructure & Reliability
Hosting
AWS (US regions)
Database
PostgreSQL 16
API Response
< 300ms
Encryption
TLS 1.3 + AES-256
Reliability
✅ Critical operations are idempotent
✅ Payment webhooks reconciled automatically
✅ Background jobs are retryable
✅ Failed notifications tracked and retried
✅ Schedule generation runs asynchronously
✅ Payment webhooks reconciled automatically
✅ Background jobs are retryable
✅ Failed notifications tracked and retried
✅ Schedule generation runs asynchronously
Scalability
✅ Multiple organizations supported
✅ Multiple leagues per organization
✅ Thousands of players, hundreds of teams
✅ Paginated APIs for large data sets
✅ Async report generation
✅ Multiple leagues per organization
✅ Thousands of players, hundreds of teams
✅ Paginated APIs for large data sets
✅ Async report generation
Technical Integrations
Connected Services & Platforms
| Integration | Purpose | How It Works |
|---|---|---|
| Stripe | Payment gateway | Registration fees, team fees, membership dues, invoices, refunds. PCI-compliant hosted checkout. Webhook reconciliation. |
| Plaid | Financial institution connections | Link bank accounts to sync transaction data. Compare expected fees against actual deposits. Auto-classify transactions. |
| AWS Cognito | Identity & authentication | OAuth2/OIDC login, Google federated sign-in, MFA support, JWT-based stateless sessions. JIT user provisioning. |
| AWS S3 | Document & media storage | Logos, documents, compliance files, receipts, board minutes. Pre-signed URLs for secure uploads. |
| AWS SES / SNS | Email & notifications | Transactional emails (registration, payment, schedule), SMS notifications, delivery tracking, retry on failure. |
| CricClubs | Stats import | Import historical scorecards, player statistics, and season results from CricClubs into LeaguEvo. |
| Google Sign-In | Social login | One-click sign-in with Google accounts. Linked to Cognito for unified identity management. |
| OpenAPI / REST | API platform | Full OpenAPI 3.1 spec. All operations available via REST. Enables third-party integrations and custom workflows. |
AI-Powered Operational Agents
In-App AI Agents
12 Agents Available| Agent | What It Does | Approval |
|---|---|---|
| 🗓️ Scheduling Optimizer | Generates balanced round-robin schedules respecting team blackouts, ground availability, home/away fairness, umpire conflicts, and time-slot balance | Admin Review |
| 👨⚖️ Umpire Assignment | Assigns match officials ensuring no team umpires while playing, fair distribution, and conflict avoidance | Admin Review |
| 📊 Finance Review | Auto-classifies bank transactions, flags anomalies (missing receipts, cash without justification, UBIT risk, personal expenses), calculates audit score | Auto + Flag |
| 📋 Compliance | Tracks nonprofit IRS readiness, missing documents, expired policies, annual filing deadlines, governance gaps, and Form 990 checklist status | Automated |
| 🤝 Sponsorship Compliance | Monitors sponsor deliverable deadlines, fulfillment status, agreement expiry, and potential unrelated business income risk | Automated |
| 🧾 Donation Receipt | Generates tax-deductible donation receipts, verifies donor records, tracks restricted vs unrestricted funds | Treasurer Review |
| 📧 Communications | Drafts schedule announcements, payment reminders, registration follow-ups, reschedule notices, and weekly summaries | Admin Review |
| 🏏 Match Results | Validates scorecard data (overs, runs, wickets consistency), updates standings, recalculates NRR, flags statistical anomalies | Auto + Flag |
| 📈 Analytics | Produces weekly performance insights, team comparison reports, qualification scenarios, fairness analysis, and sponsor impact metrics | Automated |
| 🔄 Integration | Manages CricClubs data imports, Plaid sync orchestration, Stripe webhook processing, and external data flows | Automated |
| 📝 Registration Workflow | Orchestrates player and team onboarding: tracks form completion, waiver status, payment, and eligibility — sends reminders for incomplete steps | Automated |
| 💬 Support | Answers member questions about schedules, payments, registration status, and policies using only approved document citations | Automated |
💡 AI Safety Principles
All agents operate through approved APIs — never bypassing RBAC or tenant isolation. Every agent action is traceable in the audit log. High-impact actions (schedule publication, financial changes) always require human approval. Agents support dry-run mode and rollback plans.
How LeaguEvo Is Different
LeaguEvo vs CricClubs, SportsKind & Other Platforms
| Capability | CricClubs / SportsKind / Others | LeaguEvo |
|---|---|---|
| Organization scope | Scoring, league tables, and basic team management | Full operating system: leagues + clubs + teams + finance + compliance + communications in one platform |
| Multi-sport support | CricClubs: Cricket only. SportsKind: Multi-sport but limited to scheduling/registration | Cricket, baseball, softball, basketball, volleyball, pickleball — each with sport-specific scoring engines and configurable rules |
| Financial management | Basic fee collection, no dashboards or bank connectivity | Private dashboards per entity, bank connections (Plaid), auto-classification, budgets, reimbursements, audit scores, UBIT flagging |
| Nonprofit / IRS compliance | Not supported | Full 501(c)(3) readiness: board records, minutes, bylaws, donations, Form 990 checklist, annual reminders |
| Club governance | Not supported | Office bearers with terms, leadership requests, self-assign, board records, governance documents |
| Scheduling | Manual fixture entry or basic round-robin without fairness optimization | AI-powered round-robin generation with fairness scoring, ground allocation, umpire conflict detection, blackout respect |
| Privacy & data protection | Basic privacy policy, no classification or retention | CCPA/CPRA ready, COPPA for youth, FERPA for schools, data classification levels, consent management, retention policies |
| AI assistance | None | 12 operational AI agents: scheduling, finance review, compliance tracking, communications, match validation, analytics |
| Payment integration | Basic PayPal, Square, or manual tracking | Stripe with hosted checkout, ACH, auto-retry, webhooks, refund workflows, invoice generation, reminders |
| Bank connectivity | Not available | Plaid integration — sync real bank activity, compare expected vs received, auto-flag discrepancies |
| Audit trail | Limited or none | Complete audit log of every action, exportable, with before/after values and AI agent traceability |
| Multi-tenant architecture | Shared database, limited isolation | True tenant isolation — every query enforced by architecture, not policy. Cross-tenant access blocked by design. |
| White-label / branding | Generic platform branding | Per-organization branding: custom logos, colors, and themes applied across the platform |
| Youth protection | Basic age tracking, waivers | COPPA-compatible parent/guardian accounts, encrypted emergency contacts, restricted medical data, pickup authorization |
| Scoring engine | CricClubs: Full cricket scoring. SportsKind: Basic score entry. | Configurable sport-specific engines with custom points, tiebreakers, NRR, powerplays, qualification scenarios, and player statistics |
| Sponsor & donation management | Not available | Sponsor agreements, deliverable tracking, fulfillment status, donation records, restricted fund management, receipt generation |
✅ The Core Difference
CricClubs is a cricket scoring tool. SportsKind is a registration and scheduling platform. LeaguEvo is a complete operating system for community sports organizations — managing the entire season lifecycle from registration and finances through scheduling, scoring, compliance, and board governance. It's built for organizations that want to professionalize their operations without burning out volunteers.
🚀 Coming Soon
📱
iOS & Android Apps
Native mobile apps for players, captains, and officials. Real-time score updates, push notifications, roster management, and match-day check-in — all from your phone.
Q1 2027
• Live scoring from the field
• Push notifications for schedule changes
• Player availability responses
• Photo & media uploads
• Offline scorecard entry
• Push notifications for schedule changes
• Player availability responses
• Photo & media uploads
• Offline scorecard entry
🏏
Live Scoring Engine
Ball-by-ball live scoring with real-time standings updates, wagon wheel visualizations, partnership graphs, and live commentary feeds for spectators.
Q2 2027
• Ball-by-ball entry (mobile + web)
• Real-time NRR recalculation
• Live match page for spectators
• Wagon wheel & pitch map
• Partnership & run-rate graphs
• Instant standings update on result
• Real-time NRR recalculation
• Live match page for spectators
• Wagon wheel & pitch map
• Partnership & run-rate graphs
• Instant standings update on result
🌐
Public League Websites
Auto-generated public websites for each league and club. Schedules, standings, player stats, news, and sponsor logos — branded and SEO-ready.
Q3 2027
• Custom domains per league/club
• Live standings & fixtures
• Player profile pages
• Sponsor visibility & logos
• Registration landing pages
• News & announcements
• Live standings & fixtures
• Player profile pages
• Sponsor visibility & logos
• Registration landing pages
• News & announcements