Effective date: 1 July 2026. Last updated: 1 July 2026
This Privacy Policy explains how SOCManage ("we", "us", or "our") handles information when you use the SOC Manage mobile application (the "App"). SOCManage is a passive decision-support platform for enterprise SOC and MSSP teams. The App lets authorised users monitor security incidents, alerts, and operational workflows from mobile devices.
The App is intended for business and professional use. Access is provided through accounts issued by your organisation or service provider. By using the App, you acknowledge this Privacy Policy. If you do not agree, please do not use the App.
1. Who is responsible for your data?
For the mobile application and related infrastructure operated by SOCManage, the data controller is:
BEAS Software (SOCManage)
Head Office: Business Tower Montenegro, Bulevar knjaza Danila Petrovica 13/32, 81101 Podgorica, Montenegro
Türkiye Office: Adnan Kahveci Mh, Avrupa Cd. No:108/96, 34528 Beylikdüzü/Istanbul, Türkiye
Website: socmanage.com
Contact: [email protected]
Your employer or MSSP may act as the controller of operational security data you access through the App. In those cases, we process that data on their instructions as a processor or service provider, in line with applicable agreements.
2. Information we collect
Depending on how your organisation enables the App, we may process the following categories of information:
Account and authentication data
Username and multi-factor authentication (TOTP) details submitted at sign-in
Authentication tokens issued by our identity provider (Keycloak)
Optional "trust this device" preference, if you choose to remain signed in
Notification delivery metadata required to send alerts to your device
Operational security data
Incident, alert, assignment, comment, and related SOC workflow information made available to your account through the SOCManage platform
Actions you take in the App, such as viewing, updating, or commenting on incidents, where enabled by your organisation
Technical data
App version, API requests, timestamps, and diagnostic information needed to operate, secure, and troubleshoot the service
Connection and error logs generated when the App communicates with our servers
The App does not collect raw network logs, endpoint telemetry, or broad device contacts, photos, or location data. The App is designed as a passive decision-support tool and does not send commands to your security products.
3. How we use information
We use the information described above to:
Authenticate you and maintain secure sessions
Provide access to incidents, alerts, and SOC workflows authorised for your account
Deliver push notifications about security events and operational updates
Protect the App and platform against abuse, fraud, and unauthorised access
Maintain service reliability, support, and auditability
Comply with legal obligations and enforce our agreements
We do not use the App to sell your personal data, serve third-party advertising, or perform unrelated profiling.
4. Legal bases for processing (EEA, UK, and similar jurisdictions)
Where applicable law requires a legal basis, we rely on:
Contract: to provide the App and related services to you and your organisation
Legitimate interests: to secure, operate, and improve the platform, and to prevent misuse
Legal obligation, where we must retain or disclose information under law
Consent, for optional features such as push notifications or trusted-device sign-in, where required
5. How information is stored and protected
Authentication tokens may be stored on your device using platform secure storage (for example, iOS Keychain) when you enable trusted-device sign-in.
Operational data is accessed over encrypted connections (HTTPS/TLS) from api.socmanage.com and related SOCManage services.
We apply administrative, technical, and organisational measures designed to protect information against unauthorised access, loss, or alteration.
Access to production systems is restricted to authorised personnel on a need-to-know basis.
No method of transmission or storage is completely secure. We encourage you to protect your device, credentials, and MFA codes.
6. Sharing of information
We may share information only in the following circumstances:
Your organisation / MSSP: operational data belongs to and is controlled by the customer environment you access
Service providers: trusted subprocessors that help us operate the App, such as cloud hosting, identity, and push-notification infrastructure
Apple / Google push services: limited device-token data needed to deliver notifications
Legal requirements, where required by law, regulation, court order, or to protect rights, safety, and security
Consistent with the SOCManage platform approach, analysis and operational processing stay within the controlled service environment and are not shared with unrelated third parties for their own marketing or AI training purposes.
7. International transfers
SOCManage operates internationally. If your information is transferred outside your country, we use appropriate safeguards where required by law, such as contractual protections and security measures aligned with GDPR and KVKK expectations.
8. Data retention
We retain information only for as long as necessary to provide the App, meet contractual and legal obligations, resolve disputes, and enforce agreements. Retention periods for operational security data are primarily determined by your organisation's SOCManage configuration and policies. Device tokens are removed when you sign out or when they are no longer valid.
9. Your rights and choices
Depending on your location, you may have the right to:
Request access, correction, or deletion of personal data
Object to or restrict certain processing
Withdraw consent where processing is consent-based
Request data portability, where applicable
Lodge a complaint with a supervisory authority
For account and operational security data managed by your employer or service provider, please contact your organisation first. For App-specific privacy requests, contact us at [email protected].
You can disable push notifications at any time in your device settings. Signing out of the App removes locally stored session tokens from the device.
10. Children
The App is not directed to children and is not intended for users under 16 years of age. We do not knowingly collect personal data from children.
11. Changes to this policy
We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last updated" date above. Continued use of the App after an update constitutes acceptance of the revised policy, unless otherwise required by law.
12. Contact
If you have questions about this Privacy Policy or our data practices, contact [email protected] or visit socmanage.com.