Security

Security and compliance

Your documents are contracts, HR records and client files. We protect them accordingly.

Where your data lives

Hosted on Microsoft Azure in GDPR- and POPIA-compliant regions, with a backup copy in a second region.
Encrypted at rest with AES-256 and in transit with TLS 1.2 or higher.

Who can see your documents

Only the people you share them with.
Every time a document is opened, changed or deleted, it's logged.
Your organisation can require two-factor sign-in for its users.

Signed documents you can trust

Every completed document is digitally sealed and timestamped, so any later change can be detected.

Backups and recovery

Your documents and data are backed up continuously, with a copy kept in a second location.
Documents are protected against accidental deletion, and we regularly test that we can restore them.

How we stay secure

Our security controls are mapped to CIS Controls v8 and ISO/IEC 27001:2022 Annex A.
Our application is reviewed against the OWASP Top 10, and every release is checked for vulnerable components.

Privacy

We process personal information as an operator under POPIA and as a processor under GDPR.

Questions or a security concern? Contact security@serusi.com.

See Serusi on your own documents

Send us a few sample documents and we'll show you the extracted data and the signing flow.