Skip to content
English
Contact us
  • There are no suggestions because the search field is empty.

What security controls does OPTOVERA use to protect data?

Security governance, technical safeguards, and access controls protect Service data.

OPTOVERA protects data through technical, organizational, and access-control measures designed to support secure operation of the platform.

SOBEREYE operates an ISO/IEC 27001-certified Information Security Management System, which provides a structured framework for managing information security risks, controls, and internal security practices.

OPTOVERA security controls include:

  • Encryption of data in transit, using TLS 1.2 or later.
  • Encryption of data at rest.
  • Role-based access controls.
  • Logical separation of customer environments.
  • Audit logging and monitoring.
  • Centralized Device management.
  • PIN storage only as per-User salted PBKDF2-HMAC-SHA256 derivations, held in the iOS Keychain and verified locally on the Device, never in clear text.
  • Internal security procedures and training.

Access to OPTOVERA data is limited to authorized personnel according to the Customer’s platform configuration, assigned roles, group permissions, and operational responsibilities.

These controls support the confidentiality, integrity, and availability of OPTOVERA data. They are not a guarantee that a Security Incident will never occur. See Security and IT Requirements for details.