Keselamatan di Semak AML
Security at Semak AML
How Semak AML protects your account, your team’s searches and your screening records. Last updated:
Your account and sign-in
- Two-step login. You sign in with your password and a one-time code sent by email. A browser you have used before can be remembered for up to 30 days. Our own most senior administrator accounts use an authenticator app instead.
- Password protection. Passwords are stored in a scrambled, one-way form, so your password cannot be read back from what we store.
- Sign-in protection. Repeated wrong attempts temporarily lock the account, and the number of sign-in attempts is limited.
- Automatic sign-out. If you do not use Semak AML for 7 days, you will need to sign in again. Signing out ends your session.
- Password changes. Changing or resetting your password signs your account out on every device.
- Team roles. Your firm’s admins invite team members and can deactivate and reactivate them. Other users cannot.
Your data and screening records
- Your firm’s data is separate. Each firm’s users, searches, reports and token records are kept apart from every other firm’s, with checks in both the application and the database.
- Locked screening records. When you create a PDF report, the screening record behind it is locked: the results, review decision and notes can no longer be changed.
- Activity log. Sign-ins, searches, review decisions and report downloads are recorded, and entries cannot be edited or deleted.
- Name-free emails. Our emails do not include the names you screen.
- Payments. You pay by card on our payment provider’s secure page, so your card details are entered there, not on Semak AML. We do not store card numbers.
- Behind the scenes. Connections to Semak AML are encrypted, and the software we use is checked automatically for known security problems on every change and every week.
This page describes how Semak AML is set up today and is updated when that changes.
Reporting a security issue
If you think you have found a security issue in Semak AML or on this website, please email us with the details:
Please tell us how to reproduce the issue. We will reply by email. Our contact details for security reports are also published in our security.txt file.