Skip to content
Security, permissions & audit

Right info, right people, and a record of everything

Access roles give each person exactly the view they need and nothing they should not, while a complete audit trail records who changed what and when. Add two-step sign-in for extra protection, run multiple venues under one secure, tenant-isolated account, and download a full backup of your data whenever you like.

Included in
Free Starter Professional Business Enterprise
Core feature, free on every plan · advanced options on higher tiers
app.sonicems.com
The access control editor showing granular per-role permissions
The difference

From scattered and stressful to joined-up and calm

Without a system like this

  • Everyone can see and change everything
  • No way to know who altered a booking, or when
  • Sensitive pay or client data in the wrong hands

With Sonic EMS

  • Fine-grained, per-role access control
  • A permanent audit trail of every change
  • Two-step sign-in and strict tenant isolation
What you get

Built to do the job properly

Access roles

Roles you define, with per-capability permissions across the whole system.

Full audit trail

Every create, edit and delete recorded - who, what and when, with the value before and after.

Two-step sign-in

Optional authenticator-app verification, enforceable per company.

Multi-company

Run several venues under one login, each fully isolated.

Security & Audit

Permissions as fine as you need

Control what each person can see and do down to the capability, with view-only and full-access levels. Build access roles such as Technician, Front of House Manager or Read Only, give each person a role, and change a role once to update everyone who holds it. Folder-level permissions keep sensitive files private.

  • View-only vs full-access, per capability
  • Access roles that set up new starters in seconds
  • One-off exceptions and folder-level file permissions
app.sonicems.com
Access Roles - Technician, Front of House Manager and Read Only

Change a role once, and everyone holding it is updated.

Security & Audit

A complete, permanent record

Sonic EMS writes an audit record for every change to your data, so you can always answer who did what and when. Combined with two-step sign-in and strict tenant isolation, your operation stays accountable and secure.

  • Audit trail on events, files and more
  • Two-step (authenticator app) sign-in
  • Strict per-company data isolation
app.sonicems.com
An audit log listing changes with user and timestamp

Nothing gets lost, nothing gets overwritten by accident.

Security & Audit

Your data stays yours

Download a complete backup at any time - every table as JSON and as a CSV you can open in Excel, plus your uploaded files - and restore from it if you ever need to. Unattended sessions lock themselves behind a password without losing unsaved work, and if you ever leave, closure has a 30-day grace period before anything is deleted.

  • Full backups and exports, with restore
  • Inactivity lock that keeps unsaved input
  • Every backup and restore recorded in the audit log
app.sonicems.com
The Backups & Export page listing what a backup contains

Take your data with you, any time.

Security & Audit

Hardened against attack

Sonic EMS is regularly reviewed for security, and protections are built into every page. Pages only run Sonic EMS’s own scripts, so injected content can’t take over a session. Repeated failed sign-ins lock the account for a while, password resets are rate-limited, reset links work once and expire, and changing a password signs out every other session.

  • A strict content security policy on every page
  • Sign-in lockout after repeated failures, and reset links that work once and expire
  • Secure session cookies, signed out everywhere on a password change
Works well with

Explore related features

Control and accountability, built in

Give every role the right access - and keep a record of everything.

Free plan available No credit card needed Set up in minutes