Security & trust
Built to protect the health information you entrust to us.
You’re trusting us with people’s health information. Here, in plain terms, is how we protect it today, and what we’re still working toward. We don’t claim certifications we haven’t earned.
Safeguards we have today
What’s protecting your data right now, each one real and in the product today. Anything still in the works is listed further down, clearly labelled.
- In effect today
Each agency’s data stays private
Every agency’s data is kept private and separate, enforced by the database itself, so one agency can never see another’s.
- In effect today
Tamper-evident audit trail
Sensitive actions are recorded to a log that can’t be edited or deleted (by design, not policy), so accountability records cannot be rewritten.
- In effect today
Chart access is logged
Every view of a client chart is recorded (who looked, at what, and when), so even just reading a record is accountable.
- In effect today
Strong password hashing
Account passwords are hashed and salted, and never stored in plain text.
- In effect today
Health information kept out of logs
Health-card numbers, identifiers and clinical details are kept out of our system logs.
- In effect today
Role-based access control
Staff access is scoped by role (owner, admin, scheduler, biller, coordinator, viewer), so people see only what their job requires. Caregivers and family members sign in through separate, secure spaces.
- In effect today
Encrypted in transit
All traffic between you and CareKindle is encrypted in transit (HTTPS/TLS).
- In effect today
Two-step sign-in
Every staff account can turn on two-step sign-in with an authenticator app, and an agency can require it for its whole team or just for its owners and admins. Sensitive actions (exporting health information, closing a pay period) ask you to re-authenticate first, even inside an active session.
See it for yourself
Every safeguard above is something you can open and check inside CareKindle. The compliance centre keeps the tamper-evident audit trail and the record of who accessed health information next to incidents, consent, retention schedules and privacy requests, so your privacy officer can verify our claims any ordinary day, not just at audit time.
Behind every record is a real person.
Charts, visit notes, health-card numbers. They belong to the people in your care. That is the reason every safeguard on this page exists.
The laws we operate under
These are laws, not certifications. Nobody issues a certificate for them, so there is nothing here to earn and nothing for an audit firm to examine. What we can tell you is that they apply to us today, and that we build to them. Every safeguard above is part of how.
PHIPA and PIPEDA
Ontario's PHIPA and Canada's PIPEDA apply to the personal health information agencies keep in CareKindle. We build to them: tenant isolation, a tamper-evident audit trail, logged chart access, and health information kept out of our logs.
Binding Canadian law · alignment self-attested, not certified
Laws we are not subject to yet
We serve Canadian agencies. If we go further, we would align to the law of that market first. We are not claiming alignment with either one today.
- HIPAA Security & Privacy Rules: Administrative, physical, and technical safeguards required for protected health information under the US HIPAA Security and Privacy Rules.
- GDPR: Data-subject rights, lawful-basis, and processor obligations under the EU General Data Protection Regulation.
Certifications & attestations
These are voluntary certifications, separate from the laws above: an outside firm examines our controls and issues a report. Nothing below is certified or audited yet, and no audit is under way. Items marked "Planned" are commitments, not achievements. We list them for transparency and will update this page when each is complete.
SOC 2 Type II
PlannedIndependent audit of our security, availability, and confidentiality controls over a monitoring period. Not yet started.
Independent CPA firm · AICPA Trust Services Criteria
ISO/IEC 27001:2022
PlannedInternationally recognized standard for an information security management system (ISMS).
Accredited ISO certification body
What we’re working toward
Controls we are building or formalizing. None of these is claimed above, because none of these is finished.
- Multi-factor authentication required by default for privileged roles (today each agency turns it on for its own team), and extended to caregiver and family logins
- Encryption at rest with managed keys
- A data-processing agreement with our hosting provider, on file and shareable, confirming Canadian residency. The deployment already runs in Canada, and the register below names the provider and the country.
- The control and evidence work an independent SOC 2 Type II audit would examine, then ISO 27001. No audit firm is engaged and no observation window has opened.
- Ready-to-send regulator and individual breach notices, generated from the incident record
Sub-processors
The third parties we use in delivering CareKindle. We notify customers before adding a new sub-processor that handles their data.
We publish "Confirming region" rather than guess.
| Sub-processor | Purpose | Data location | Status |
|---|---|---|---|
| Amazon Web Services (hosting & database) | Application compute, the primary database and encrypted document storage. This is where client records live. | Canada | Active |
| Email delivery (Amazon SES) | Transactional email delivery: invitations, verification codes and schedule/visit notifications. Message content can reference a client. | Canada | Active |
| Stripe | Agency subscription billing only. Never used for client/patient billing. | United States / global | Active |
| Mapbox | Maps and geocoding for scheduling and visit verification (EVV). | United States | Active |
| Google (Tag Manager & Analytics) | Website analytics via Google Tag Manager and Google Analytics, on the public marketing website and the sign-in host (app.carekindle.com) only. On the marketing website it is on by default with a working opt-out (implied consent); on the sign-in host nothing loads until the visitor accepts (opt-in). See the privacy policy. It never runs on the tenant application where client data lives. | United States / global | Active |
| Google reCAPTCHA Enterprise | Automated-access protection on the sign-in, sign-up, password-reset and email-verification forms of the sign-in host (app.carekindle.com), and on the contact and demo-request forms of this website. It scores whether a form submission comes from a person. It never runs on the tenant application where client data lives. | United States / global | Active |
| Lucky Orange | Session replay and heatmaps for the public marketing website, loaded through Google Tag Manager. Not collecting anything today: the website blocks the script from loading, so no session is recorded. It has never run on the sign-in host or on the tenant application where client data lives. | Confirming region | Coming soon |
| QuickBooks Online | Accounting sync an agency can connect: sends client billing contacts, caregiver vendor or employee records, invoices and contractor bills to the agency’s own QuickBooks company when the agency runs a sync. | United States | Coming soon |
| Google Maps Platform (address suggestions) | Suggests complete street addresses while someone types one into an address form, so it is entered correctly the first time. | United States / global | Active |
| Firebase Cloud Messaging (Android notifications) | Delivers the CareKindle Android app’s notifications to the phone of a person who allowed them. | United States | Active |
| Apple Push Notification service (iPhone notifications) | Delivers the CareKindle iPhone app’s notifications to the phone of a person who allowed them. | United States | Active |
Procurement or security team?
CareKindle is the product; CareKindle Technologies Inc. is the company behind it, and the entity you would be contracting with. We’re happy to walk through our safeguards and share sub-processor data-processing agreements under NDA. We have no SOC 2 report to offer: no audit has been performed.
Read it, then try it: every line on this page is in the product.
14-day trial · full access · no credit card.
