Security
How this site is protected, in principles rather than specifics.
In transit
Everything between your browser and this site travels encrypted. There is no unencrypted version of the site you could reach by accident.
At rest
Anything you send us is stored encrypted and kept separate from other information we hold.
Access is limited to the people who need it to do their work, and to nobody else.
Keeping it current
The software this site is built on is checked regularly for known weaknesses, and updates are applied on a schedule rather than after something goes wrong.
Backups are taken daily and their success is verified, because a backup nobody checks is not a backup.
Access
Administrative access requires more than a password, and is held by the smallest number of people who need it.
Our standard
This site is built to the Kwata Security Standard and aligned with PIPEDA and Alberta PIPA.
We do not hold a SOC 2 attestation or an ISO 27001 certification, and we do not describe ourselves as certified or compliant. Where we say built to and aligned with, we mean exactly that.
Telling us about a problem
If you believe you have found a security problem here, please tell us before telling anyone else and we will work with you on it.
We will not pursue anyone who reports a genuine issue in good faith.