Built on the 5 Trust Services Criteria
Our systems are architected to satisfy strict independent security audit controls.
1. Security & Protection
Protected against unauthorized physical & digital access using Web Application Firewalls (WAF), multi-factor authentication (MFA), and zero-trust perimeter defenses.
2. 256-bit AES-GCM Encryption
All appointment requests and intake form data are client-side encrypted using 256-bit AES-GCM (Web Crypto API) before transmission across the web.
3. Processing Integrity
Strict input sanitization filters and automated validation rules block SQL injection, Cross-Site Scripting (XSS), and payload tampering.
How Your Form Submissions Are Protected
End-to-End Form Encryption (AES-256-GCM)
When you fill out a patient form or contact request on our website, your browser instantly executes our client-side encryption module using the native Web Crypto API (`window.crypto.subtle`).
Before the request leaves your device, all sensitive patient details (names, dates of birth, phone numbers, medical conditions) are converted into an un-hackable ciphertext payload accompanied by a 96-bit cryptographic initialization vector (IV). Even if a malicious attacker intercepts network traffic, they receive only encrypted gibberish.
TLS 1.3 Transit & AES-256 Storage
Data in transit between your browser and our Ottawa dental servers is encrypted using modern TLS 1.3 transport security with Perfect Forward Secrecy.
Once received, data is stored in encrypted healthcare database clusters utilizing AES-256 storage encryption at rest, meeting Ontario PHIPA and federal PIPEDA compliance mandates.
Contact Security Officer
For security inquiries, audit verifications, or data protection reports, please contact our IT & Security Compliance department:
Ready for Safe, Stress-Free Dental Care?
Book your child's appointment with confidence knowing your family's data is 100% encrypted and secure.