Security

How the desk is kept apart

One business per record

Every private row carries a tenant id. The database enforces it. Two businesses cannot read each other.

Canada hosting

Production hosting of our application database is planned in Canada. The line does not go live until that Canada host and a permanent phone webhook are on. Transport is encrypted. The database is encrypted at rest. Phone, AI, email, and payment are separate processors. We do not claim every vendor processes information only in Canada.

No call audio

The log keeps time, language, receptionist, length, and outcome. The recording is not stored.

Signed payments and phone events

Stripe and the phone provider are verified on the raw body. A browser success page cannot mark a clinic paid.

Alberta residential buildings

Classification follows the operator, licence, and services — not the word senior. Private ordinary housing may fall under PIPA. Public housing may fall under POPA. Licensed continuing care is not self-serve. How that is applied.