Last Updated August 14, 2024

Security Policy

Application of this Security Statement

Thank you for visiting Sante Circle Health’s (“SCH”) Website (the “Website”). This Security Statement describes SCH’s policy and practices in relation to Security.

The Security and Privacy teams at Sante Circle Health set policies and controls, oversee adherence to those controls, and validate the company’s security and compliance with external auditors.

Our policies are based on the following foundational principles:

  1. Access should be restricted to only individuals with a genuine business requirement, and permissions should be granted based on the principle of providing the minimum level of access necessary.
  2. Security controls should be implemented and structured in multiple layers, following the principle of defense-in-depth.
  3. Security controls should be implemented uniformly across all parts of the organization.
  4. The implementation of security controls should be an iterative process, continuously evolving to improve effectiveness, increase auditability, and reduce friction.

Data Protection

Sante Circle Health system’s are hosted in Canada on Amazon Web Services and Microsoft Azure, top global providers of public cloud infrastructure. AWS and Microsoft consistently receive third-party validation for numerous international compliance standards, including PCI-DSS, HIPAA, HITECH, ISO 27001, and the SOC1, 2 & 3 frameworks.

 

Data Encryption

Our systems utilize AES 256-bit encryption to safeguard data stored at rest. The network traffic between the browser, applications, and our servers is encrypted with at least TLS 1.2.

Security testing and quality

Our technology eco-systems are routinely scanned for security vulnerabilities. We investigate and address security events reported by internal and external parties. If you believe you have discovered a security issue, please refer to our contact details below.

Security Officer

All comments, questions, or concerns regarding SCH’s security should be forwarded to our Security Officer as follows:

Sante Circle Health

Address: 4711 Yonge Street, 10th Floor, Toronto, Ontario, M2N 6K8

Attention: Security Officer

E-mail: security@santecirclehealth.com