Security
Overview of security measures and data protection in SeeRM.
Security Overview
SeeRM takes security seriously at all levels — from data storage to application access.
Data Security
- All underlying data storage is HIPAA, GDPR, and SOC2 compliant
- Complete separation between customer instances — no data crossover
Application Security
- Authentication: Multi-factor email verification (MFA) ensures only authorized users can log in
- Role-based permissions: Access is controlled by roles: ADMIN, USER, PARTNER, INSTALLER
- API authentication: Secured through bearer tokens
- User authentication: Managed via cookies and JWT tokens, with short-lived refresh tokens
Access Control
- We follow a least-privilege approach:
- Access to customer data is only granted upon a request or ticket submitted by the customer
- Otherwise, no one in our company can access customer data
This approach ensures maximum security and privacy for all SeeRM customers.