Security & Trust

At SemsTrend, trust is not a marketing slogan; it is an architectural decision. These are the safeguards we apply: DATA TRANSMISSION • All traffic is encrypted with TLS (HTTPS); unencrypted connections are not accepted. • Session cookies are marked httpOnly + secure + sameSite; browser scripts cannot access them. IDENTITY AND ACCESS • Member accounts are created only by administrators; trial sessions expire after 24 hours. • Access codes are stored as irreversible scrypt hashes — plain-text codes are never stored anywhere. • Sessions are signed with HMAC-SHA256; member sessions are valid for 7 days. All sessions can be revoked at once with a single central key (epoch). DATA STORAGE • Data is stored on managed PostgreSQL infrastructure hosted in the European Union (Frankfurt). • Database connections use encrypted channels; access credentials are kept in environment variables, not embedded in code. • Every radar run is recorded in a traceable way with its source, quality and decision chain (provenance). PAYMENTS • Card payments are processed by a licensed payment service provider; card details never reach our servers. • Online checkout is not open yet; until it opens, plans are arranged by email for businesses only. DATA POLICY • Your data is not sold to third parties. • KVKK and GDPR principles are observed; deletion requests are handled through the contact page. For security questions or reports: support@aresta.online