SECURITY & COMPLIANCE
Trusted with what matters
Aesthetic clinics hold some of the most personal data any small business carries: medical histories, clinical photos, consent records. Serene is built and hosted as if that's exactly what it holds. Because it is.
Your data stays in Australia
All Serene systems are hosted on secure Australian servers. Client records, photos, consent forms and payment records are stored onshore and don’t leave the country in the ordinary course of operation.
AU
Data hosted onshore
SOC 2
Certified infrastructure
IRAP
Government assessed
Certified to standards banks and government use
Every layer of Serene runs on independently audited infrastructure: data hosting and application delivery certified to SOC 2 Type 2 and ISO 27001, and payments handled by Stripe, a PCI DSS Level 1 service provider, the most stringent level in the payments industry. Salon booking tools rarely clear this bar.
Encryption
Data encrypted in transit and at rest.
PAYMENTS
Card details never touch Serene’s servers. Payments are processed by Stripe, certified PCI DSS Level 1, the highest level in the payments industry.
Access control
Role-based permissions, clinical notes and photos visible only to authorised practitioners.
Audit trails
Records of who viewed and changed what, time-stamped.
Backups
Automated backups with tested recovery.
Built for a regulated industry
Serene is designed to support clinics operating under the Privacy Act and Australian Privacy Principles: structured consent capture, clinical record-keeping, retention-friendly exports, and access controls that let you honour your obligations to patients. Software doesn’t make a clinic compliant, but the right software makes compliance the path of least resistance.
Ask us the hard questions
Security reviews, data-processing questions, or a due-diligence checklist from your insurer, send them through. Serious questions get serious answers. If you believe you’ve found a vulnerability, we want to hear about it.
See Serene on your clinic’s real workflows
A 30-minute demo, tailored to how your clinic runs. No pressure, no obligation.