We describe only the controls we actually operate.
- Encryption in transit: all traffic uses HTTPS (TLS 1.2+).
- Encryption at rest: every uploaded document, ID image and completed document is encrypted with AES-256-GCM before it is written to storage. Keys are held separately from the data.
- Access control: identity-document access is separated from ordinary customer-support access. Staff roles follow least privilege, and every file access is logged with who, when and why.
- Expiring links: documents are delivered through signed links that expire; you can always sign in to retrieve them again.
- Payments: card details are handled by our payment provider (Stripe); we never see or store full card numbers.
- Audit trail: case status changes, consents, professional actions and configuration changes are recorded in an immutable audit log.
- Retention: documents, ID images and session records are retained only for the periods in our Retention Schedule, then securely deleted.
- Testing and patching: dependencies are patched regularly and security-relevant changes are reviewed before release.
We do not claim certifications we do not hold. If you find a security issue, email security@enotarypublic.ca.