Security
Security built into every layer
Your data is separated per customer in the database, sign-in is protected with two factors and passkeys, every sensitive action is audited, and an AI firewall watches for attacks and misuse.
Sign-in
Strong sign-in for every account
Choose how your people sign in, and how strict the rules are, per tenant.
Two-factor authentication
Authenticator apps (TOTP) with backup codes, or one-time codes by e-mail or SMS.
Passkeys
Sign in with a fingerprint, face or hardware key, with or without a password.
Single sign-on
SAML 2.0 with your own identity provider. Users are created on first sign-in and get roles from your directory.
Social sign-in
Google, Microsoft, Apple and nine more providers, so people sign in with an account they already have.
Password and lockout policies
Length and history rules, forced rotation, account lockout after failed attempts and CAPTCHA against guessing.
Sessions you control
See active sessions, sign out any of them, and trust only the devices you choose.
Platform
Secure by design, not by add-on
The same rules apply to every tenant, every device and every API call.
Separation per customer
Each customer is a tenant, and the database itself keeps tenants apart with row-level security.
Fine-grained access
Roles, groups and attribute-based policies decide who may see or change what.
Complete audit trail
Sensitive actions are written to an append-only audit log per tenant, including any support access.
Data residency
Separate deployments in the EU, the US and Türkiye. Your data stays in the region you choose.
Device credentials
Device secrets are hashed and shown once, can be rotated or revoked, and certificates come from the platform's own authority.
AI firewall
Detectors, rules and decoys spot attacks and misuse, and every incident comes with a reason.
Privacy
Your data, your rules
Data-subject requests
Export or erase a person's data across the platform when they ask, with a record of every request.
Hosted in your region
Hermetry is built by Roltek A.Ş. in İzmir and runs in separate EU, US and Türkiye deployments.
Questions from your security team?
We answer security questionnaires and walk your team through the architecture.