Security at Serql

We take the security of your data seriously. Our infrastructure is built on industry-leading platforms, and we follow strict data handling practices to ensure your information remains safe.

Authentication
Enterprise-grade identity management
We partner with Clerk to handle all authentication. We support secure login methods including Google OAuth, Passkeys, and Multi-Factor Authentication (MFA). We do not store your passwords on our servers.
Read-Only Access
We never modify your data
When you connect Google Search Console, you grant Serql read-only access. We only fetch your performance data to power your dashboards. We cannot and will not modify any of your GSC configuration.
Secure Infrastructure
Built on trusted cloud platforms
Our application is hosted on Vercel's edge network. Your data is securely stored in a managed Neon Postgres database. All data is encrypted in transit using TLS and at rest using AES-256.
Share Links
Controlled public access
Public share links are generated with cryptographically secure, unguessable tokens. You have full control over these links and can revoke them instantly from your dashboard at any time.

Data Handling Principles

Our approach to your data is simple: we collect only what is strictly necessary to provide you with an excellent experience. During our beta phase, we do not collect any payment or credit card information.

Data Deletion

If you choose to delete your account, we initiate a cascading delete process. Your connected Google Search Console properties, classifications, annotations, and generated reports will be permanently removed from our active database.

Infrastructure & Compliance

We rely on top-tier infrastructure providers that meet stringent compliance standards (SOC 2, ISO 27001).

  • Database: Neon Postgres handles our primary data storage with built-in encryption at rest.
  • Caching: Upstash Redis provides secure, low-latency data caching and rate limiting.
  • Hosting: Vercel's global edge network ensures secure and fast delivery of our application.

Responsible Disclosure

We value the security community and encourage responsible disclosure of any potential vulnerabilities. If you believe you have found a security issue in Serql, please contact us immediately at support@serql.io. We ask that you do not publicly disclose the issue until we have had a chance to investigate and remediate it.