The whole crowd, live. Not a single name.

ONDA plugs into the systems you already run (ticketing, RFID wristbands, bars, access gates, your app) and turns every scan, tap and payment into a live picture of the event: where people are, what they spend and which acts hold them. Names, emails and phone numbers are encrypted at the door, so your team, sponsors and artists get the insight without the liability.

Book a pilot event See it live on demo data
Simulated match at San Siro. A cell lights up only once 10 or more fans are in it. ONDA never shows a smaller group.

ONDA on film

From the first tap at the gate to a sponsor report that proves what it moved: one data backbone across festivals, stadiums and venues.

The ONDA film · 40 seconds
The matchday film · 50 seconds

Four kinds of event, one engine

A stadium, a race circuit, a festival site and a club move and spend in completely different ways. Each one-minute film follows a single synthetic event through ONDA, from the first gate scan to the moment an export is refused because it would say too much.

Football: a derby at San Siro

75,000 fans, four vendor feeds and six pipeline stages. Watch the curva rise when a chance comes, scored by sector and never by face, and a sponsor export refused once the privacy budget is spent.

San Siro film: still framePlay the film

Synthetic data. Sound is off until you turn it on in the film. Concept film: ONDA is not affiliated with AC Milan, FC Internazionale Milano or the operators of Stadio San Siro.

Open full screen

Formula One: race day at Monza

A crowd spread over 5.8 km of circuit, from the Parabolica grandstand to the paddock. ONDA reads gates, bars and the race app, never the cars: when the leader passes, Captivation rises grandstand by grandstand, never by face.

Monza film: still framePlay the film

Synthetic data. Sound is off until you turn it on in the film. Concept film: ONDA is not affiliated with Formula 1, the FIA, Autodromo Nazionale Monza or any team. Circuit geometry: bacinger/f1-circuits (MIT).

Open full screen

Festival: a Saturday at Coachella

Ten stages, two weekends and a campground. Follow one wristband through its day: a ticket, gate scans, two taps and an app favourite, linked into one attendee only when the evidence is strong. Then see the sponsor report refused once the privacy budget is spent.

Coachella film: still framePlay the film

Synthetic data and invented artists. Concept film: ONDA is not affiliated with Coachella, Goldenvoice, AEG or the Empire Polo Club.

Open full screen

Club: a Saturday at an Ibiza superclub

3,200 guests between the main room, the terrace, two bars and a VIP balcony. Room counts show only from 10 guests, so a booth is never shown on its own. The host knows table 4 is arriving because the guest opted in, never by name. DJs reach fans only through the ONDA relay.

Club film: still framePlay the film

Synthetic data, an invented club and invented DJs. No cameras, no biometrics.

Open full screen

ONDA running right now, on a fictional event

A synthetic festival, stadium or club event runs through the real engine around the clock in Frankfurt. What you see below is exactly what ONDA is allowed to release: groups of 10 or more, nothing about any one person.

Connecting to the engine
–vendor events received this event
–people in zones, last 10 minutes
–bar and merch spend, last hour
–audit log entries, chain verified

Crowd by zone, last 10 minutes

Waiting for the live feed.

Hatched rows hold fewer than 10 people, so ONDA holds the number back.

Captivation by act

Waiting for the live feed.

0–100: how strongly each set held its crowd, averaged over groups only.

Open the operator console Ask for a console key

Make decisions during the event, not after it

One console for operators, hosts and partners, fed by the systems you already run. No new hardware, nothing to replace.

Move staff and stock to where the crowd is going

Crowd and spend by zone, updated live, show which bars are queuing and which stage is filling while there is still time to act.

Know which acts actually hold the crowd

The Captivation Index scores every set from 0 to 100, using time spent at the stage, app activity and merch bought during the set or within the hour after. Book and price talent on evidence, not on streaming numbers.

Recognise your best guests on arrival

When a top-spending guest who opted in walks in, the host gets an alert with a short guest code. Better service, and no name ever appears on screen.

Sell audience proof to sponsors and labels

Sponsors get audience benchmarks and labels get the fan cohort from their own set. Both pass the privacy gate first, and artists reach fans only through the ONDA relay, so no contact list ever leaves your hands.

From wristband tap to decision in four steps

Personal data is locked away the moment it arrives. Everything you see is built from tokens, so insight can travel and identities can't.

  1. Connect

    ONDA reads events from your ticketing, cashless and RFID, POS, access control and app as they happen.

  2. Encrypt at entry

    Names, emails and phone numbers are swapped for tokens on arrival and locked in an encrypted vault. Every chart, score and alert is built from tokens only.

  3. Analyse live

    Events are placed by the time they happened, not when they arrived, so payments from a terminal that went offline still land in the right minute.

  4. Release through the gate

    Anything leaving ONDA, a sponsor report or a label cohort, is checked for group size, protected with statistical noise and logged. If it fails, it isn't sent.

Compliance built into the engine, not added on top

These rules run in the code and are tested on every release. No client contract can switch them off, which is what lets you share insight without sharing risk.

Legal basisRunning the event: contract. Aggregate analytics: legitimate interest, with a right to object. Personalisation and sharing with partners: explicit consent only.
Minimum group sizeNo report ever shows a group of fewer than 10 people (k-anonymity, k ≥ 10).
Noise budgetEach release adds differential-privacy noise (ε ≤ 0.5), capped at 2.0 per edition, so repeated reports can't be combined to single anyone out.
Artists and labelsThey message fans through the ONDA relay. They never receive a contact, a list or a hashed file.
RetentionEach type of data has its own deletion date, enforced automatically every 6 hours.
Right to be forgottenThe data is deleted or its encryption key destroyed. Never just hidden.
AuditEvery consent change and every release is written to a tamper-evident, hash-chained log.
HostingEU only, in Frankfurt. Monitoring data stays on the same private network and never goes to a third party.
NeverNo cameras, no facial recognition, no biometrics. Excluded by design, not postponed.

Built for every kind of venue

Each venue type has its own model of how people move and spend, so the numbers mean something to the people running it.

Festivals

Multiple stages and crowds moving between sets. See which acts pull people across the site and where they go next, then schedule and staff around real flows.

Race circuits

Grandstands, general-admission banks, paddock hospitality and gates spread over kilometres. See which grandstands fill, where queues form and what each passing moment does to spend.

Stadiums

A seated bowl, concourse kiosks, fan store and hospitality. See spend stand by stand and measure what each sponsor activation actually moved.

Clubs

Several rooms, rotating DJs and VIP tables. See when tables fill and which sets keep the floor full, hour by hour.

Run one event on ONDA

The pilot connects ONDA to your systems and runs a full event with synthetic attendees on your own venue layout, so you see the console working before any real data moves. Real attendee data comes in only after the data protection impact assessment and your DPO's sign-off.

Book a pilot event See it live on demo data