Serene wordmark

SECURITY & COMPLIANCE

Trusted with what matters

Aesthetic clinics hold some of the most personal data any small business carries, medical histories, clinical photos, consent records. Serene is built and hosted as if that's exactly what it holds. Because it is.

Your data stays in Australia

All Serene systems are hosted on secure Australian servers. Client records, photos, consent forms and payment records are stored onshore and don't leave the country in the ordinary course of operation [VERIFY: any offshore subprocessors, e.g. SMS/email delivery, disclose here if so]. For clinics, that means simpler answers to the questions patients, insurers and regulators ask.

AU
Data hosted onshore
SOC 2
Certified infrastructure
IRAP
Government assessed

Certified to standards banks and government use

Encryption

Data encrypted in transit and at rest. [VERIFY against actual practice]

Access control

Role-based permissions, clinical notes and photos visible only to the practitioners you authorise. [VERIFY against actual practice]

Audit trails

Records of who viewed and changed what, time-stamped. [VERIFY against actual practice]

Backups

Automated backups with tested recovery. [VERIFY against actual practice]

Payments

Card payments processed by PCI-DSS-compliant providers; Serene doesn't store raw card numbers. [VERIFY]

Built for a regulated industry

Serene is designed to support clinics operating under the Privacy Act and Australian Privacy Principles, structured consent capture, clinical record-keeping, retention-friendly exports, and access controls that let you honour your obligations to patients. Software doesn't make a clinic compliant, but the right software makes compliance the path of least resistance. [VERIFY framing with legal review]

Ask us the hard questions

Security reviews, data-processing questions, or a due-diligence checklist from your insurer, send them through. Serious questions get serious answers. [PLACEHOLDER: security contact email]. If you believe you've found a vulnerability, we want to hear about it: [PLACEHOLDER: responsible disclosure contact/policy].

Contact the team

See Serene on your clinic's real workflows

A 30-minute demo, tailored to how your clinic runs. No pressure, no obligation.