Security and defense your reviewers will trust
Semiora is built like infrastructure: automated threat quarantine at the edge, PostgreSQL advisory locks for zero race conditions, WorkOS SAML/OIDC SSO, SCIM v2 directory sync, and automated audit logs.
The controls your security team will ask about
Encryption in transit & at rest
TLS on every connection and AES-256 at rest, with keys stored separately from your data and rotated automatically.
SSO / SAML
Sign-in through your identity provider with enforced SSO for the whole workspace, so credentials never live in Semiora.
SCIM provisioning
Create, suspend and deprovision seats straight from your directory. Joiners get access on day one, leavers lose it instantly.
Role-based access
Owner, admin, member and guest roles with least-privilege defaults, so people only see the pages and channels they need.
Audit logs
Every sign-in, booking and admin change is written to a tamper-evident log you can stream, search and export on demand.
Data residency (EU / US)
Pick your hosting region at the workspace level. Booking data and backups stay in region, end to end.
Subprocessor transparency
A public, versioned subprocessor list with change notifications, so your vendor reviews never get surprised.
Incident response
A practiced 24/7 runbook — detect, contain, notify — with status-page updates and post-incident reports you can share.
Don't take our word for it. Read the log.
Security claims are cheap; evidence is not. Semiora gives your reviewers direct access to the artifacts that matter — live audit logs, audit-ready exports and a paper trail that answers questions before they are asked.
- Security-first architecture with strict access boundaries
- A documented chain from identity provider to booking record
- Security docs packed for your review: DPA, security whitepaper, architecture
- 09:41:07maya@acme.co · SSO sign-in verified
- 09:38:52SCIM · Provisioned seat for d.okafor
- 09:12:20admin@acme.co · Exported audit log (CSV)
- 08:57:03system · Automatic key rotation completed
- 08:30:41june@acme.co · Booking page permissions updated
“Security claims are only as good as the architecture behind them. We prioritize deterministic database locks, modern SSO, and verifiable security controls.”
Security & Infrastructure Team
Semiora Core
Ask us for the security docs
Architecture overview, DPA, and security whitepaper — one packet, ready to forward to your security team.
Free forever for individuals · Pro from $12/seat · Cancel anytime