Security and trust
What we do with your data.
A security tool holds sensitive information about your company. This page says plainly how Seeso handles it, including what we do not yet have.
How it works
Facts about the service today.
- Where data is hosted
- In the United States only. The application runs on Fly.io in Virginia (iad) and the database is Neon on AWS us-east-1.
- How customers are separated
- Every customer is a separate workspace. Each row in the database carries its workspace, and PostgreSQL row-level security keeps one workspace from reading another.
- What connectors can do
- Connectors read data. They do not change your scanners, endpoints, cloud or identity systems. Each connection is tested before it is saved, and you can disconnect a source at any time.
- How credentials are stored
- Connector credentials are encrypted, and the encryption is bound to the workspace and source they belong to. Entra service-identity checks collect only expiry dates, never secrets or keys.
- Who can see what
- Members are admins or members. Signing a risk acceptance, escalating and similar powers are granted to named people and recorded in Seeso.
- How long data is kept
- Scan snapshots are kept for 25 months so you can compare against past periods. If a Compliance subscription ends, its data stays read-only for 30 days.
- Deleting your workspace
- You can delete your workspace. Deletion is refused while a Stripe balance is unpaid.
- Who else handles data
- Fly.io (hosting), Neon (database), Stripe (payments), Resend (email) and our sign-in provider. We will publish the full subprocessor list with the final privacy policy.
What we do not have yet
Seeso does not hold a SOC 2 report or an ISO 27001 certificate. We will not describe ourselves as certified until an independent auditor has said so. Our legal pages are drafts that a lawyer has yet to review.
If your procurement process needs a security questionnaire answered, email help@seeso.cloud and a person will reply.
Privacy
- Our privacy officer is reachable at privacy@seeso.cloud.
- Seeso is operated from Oakville, Ontario, and governed by Ontario law.
- Read the draft privacy policy, terms, refund policy and cookie notice.
Questions before you connect anything?
Ask us. You can also start on the free plan with a single connector.