Security, Privacy & Infrastructure Architecture
Engineered from the ground up to protect student health data and satisfy strict educational and healthcare privacy frameworks across North America.
Encryption Standards
Data in transit is secured using TLS 1.3. All database records and uploaded medical clearance documents are encrypted at rest using AES-256 bit keys.
Multi-Tenant Isolation
Row-Level Security (RLS) policies isolate each school board or league dataset at the database kernel layer, making cross-tenant data access strictly impossible.
Ephemeral Storage URLs
Direct access links for sensitive physician files and SCAT6 logs expire automatically after 60 seconds to block unauthorized link sharing or scraping.
Regulatory Compliance Matrix
🇨🇦 Canada (PIPEDA & PHIPA)
Full alignment with the Personal Information Protection and Electronic Documents Act and Ontario PHIPA standards. Personal health data is handled strictly under non-commercial operational agreements.
🇺🇸 United States (HIPAA & FERPA)
FERPA-compliant educational record partitioning. Institutional enterprise subscriptions include execution of standard Business Associate Agreements (BAAs).
Need a VSA (Vendor Security Assessment) or BAA Execution?
Our security team responds to institutional compliance inquiries within 24 hours.
Contact Security Office →