Data security at Seempathy
Mental health is among the most sensitive data categories. Here's exactly what we do to keep it private.
In-transit encryption (TLS 1.3)
All connections to Seempathy use TLS 1.3. Video sessions use WebRTC with DTLS-SRTP. No plain-text traffic.
End-to-end encrypted clinical notes
Your therapist's clinical notes are encrypted with a key derived from their password. Even the Seempathy admin cannot read them.
EU infrastructure
Your data is stored on servers in the European Union (Hetzner Helsinki). We don't send personal data outside the EEA.
Strict access auditing
The Seempathy admin can access data only for moderation (testimonials, crisis, support). Every access is logged in an immutable audit trail.
Found a vulnerability?
We take security seriously. If you found an issue, let us know and we'll fix it immediately. Responsible researchers are publicly credited.