Home

Precisely Skin

Security and assurance

Precisely Skin applies technical and operational controls aligned with common SOC 2 and ISO/IEC 27001 expectations for access, confidentiality, integrity and accountability.

Role-based access with server-side administrator checks
Private client-photo storage with time-limited links
Dated audit records for back-office changes
Recorded client consent and consent-version history
Signed order integrations and restricted administrative actions
Configurable retention with preview and recorded deletion runs

Shared responsibility

The hosting platform provides infrastructure and platform safeguards. Precisely Skin remains responsible for practitioner access decisions, clinic processes, lawful data use, retention choices, incident response and independent assurance. The platform states that it supports SOC 2 requirements and provides documentation for enterprise review. Its app Trust Center is informational and does not certify this application. No independent SOC 2 report or ISO/IEC 27001 certification is claimed for Precisely Skin.

Reporting a concern

Report suspected unauthorised access, disclosure or misuse promptly to the clinic responsible for the assessment. Clinic administrators should suspend affected accounts, preserve audit evidence and escalate the event through their incident-response process.

Position last reviewed 13 September 2026. See also the Privacy Policy.