FeaturesPricingCompareResourcesAboutLog inBook a demo
SECURITY & COMPLIANCE

Trusted with what matters

Aesthetic clinics hold some of the most personal data any small business carries: medical histories, clinical photos, consent records. Serene is built and hosted as if that’s exactly what it holds. Because it is.

Your data stays in Australia

All Serene systems are hosted on secure Australian servers. Client records, photos, consent forms and payment records are stored onshore and don’t leave the country in the ordinary course of operation.

Built on the infrastructure banks and government use

Serene runs on cloud infrastructure that is independently audited. The hosting and delivery layers carry SOC 2 Type 2 and ISO 27001 certification and an IRAP assessment, and payments are handled by Stripe, a PCI DSS Level 1 service provider, the most stringent level in the payments industry. Those certifications belong to the platforms Serene is built on, which is the point: your clinic's records sit on infrastructure audited to a standard no small software company could reach alone. Salon booking tools rarely clear this bar.

AU
DATA HOSTED ONSHORE
SOC 2
CERTIFIED INFRASTRUCTURE
IRAP
IRAP-ASSESSED HOSTING
ENCRYPTION
Data encrypted in transit and at rest.
PAYMENTS
Card details never touch Serene’s servers. Payments are processed by Stripe, certified PCI DSS Level 1, the highest level in the payments industry.
ACCESS CONTROL
Role-based permissions, clinical notes and photos visible only to authorised practitioners.
AUDIT TRAILS
Records of who viewed and changed what, time-stamped.
BACKUPS
Automated backups with tested recovery.
CONSENT RECORDS
Digital consent forms captured and stored against the client record, alongside notes, photos and treatment history.

Built for a regulated industry

Serene is designed to support clinics operating under the Privacy Act and Australian Privacy Principles: structured consent capture, clinical record-keeping, retention-friendly exports, and access controls that let you honour your obligations to patients. Software doesn’t make a clinic compliant, but the right software makes compliance the path of least resistance.
Serene medical treatment consent form, with separate consent for treatment, clinical photography and marketing communications

Ask us the hard questions

Security reviews, data-processing questions, or a due-diligence checklist from your insurer, send them through. Serious questions get serious answers. If you believe you’ve found a vulnerability, we want to hear about it.

See Serene on your clinic’s real workflows

A 30-minute demo, tailored to how your clinic runs. No pressure, no obligation.