{"id":22825,"date":"2021-07-23T09:11:42","date_gmt":"2021-07-23T13:11:42","guid":{"rendered":"https:\/\/www.getmaple.ca\/?page_id=22825"},"modified":"2025-02-28T10:21:21","modified_gmt":"2025-02-28T15:21:21","slug":"security","status":"publish","type":"page","link":"https:\/\/www.getmaple.ca\/security\/","title":{"rendered":"Security"},"content":{"rendered":"\n

\n\t\tWe take excellent care of your data\n\t<\/h1>\n\t

We’ve implemented a comprehensive set of information security and privacy policies and processes that meet the industry’s highest standards. Our information security program is aligned with the AICPA Trust Service Criteria, ISO 27001:2013 standard, and NIST Special Publication (SP) 800 series.<\/p>\n\t\t\t\t\"Secuirty_Header\n

\n\t\tHow we protect your data\n\t<\/h2>\n\t

Data centre security<\/h3>\n

The Maple platform is hosted in Canada by the world’s leading public cloud infrastructure provider, Amazon Web Services. AWS regularly achieves third-party validation for thousands of global compliance requirements, including PCI-DSS, HIPAA, HITECH, ISO 27001, and SOC framework.<\/p>\n\t

Industry-standard encryption<\/h3>\n

Maple uses AES 256 bit encryption to secure data stored at rest. Network traffic between your browser, apps, and our servers is encrypted using at least TLS 1.2. Maple does not process or store credit card information. Instead, we use Stripe, a certified PCI-DSS Level 1 payment platform.<\/p>\n\t

Frequent testing for security and quality<\/h3>\n

Our application and infrastructure are regularly scanned for security vulnerabilities and we perform external penetration testing on a biannual basis. A security incident response team (SIRT) also investigates and responds to security events reported by internal and external sources. If you believe you’ve identified a security issue involving our mobile application or website, please see our vulnerability disclosure below.<\/p>\n\t

Account security features<\/h3>\n

We further safeguard your account by enabling two-factor authentication and helping you create a unique password with our password strength estimator. You can also monitor your account activity by checking activity logs in your account settings.<\/p>\n\t\t\t\t\"Privacy_Policy_Icon\"\n

\n\t\tPrivacy is our top priority\n\t<\/h3>\n\t

Consultations on Maple are completely private and safe. You have full ownership and control over your information. Only you decide how you want to share it with your doctor, and with us.<\/p>\n

We ask for your data to make our services more helpful to you. Our Privacy Policy describes our commitments to your privacy and security. We want you to understand how your data may be collected and used and how you can control and manage your privacy.<\/p>\n\t\t\t\t\t\t\t\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t\tLearn more\n\t\t\t\t\t\t\t<\/a>\n\t

\n\t\tFrequently asked questions\n\t<\/h2>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t
Do all doctors on Maple have access to my personal information? <\/h6>\n\t\t\t\t\t\t\t

No. You choose what you share with us and only the doctors you consult can access the information you share to diagnose, treat, and prescribe medication as necessary.<\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

How do I know my information is secure and private? <\/h6>\n\t\t\t\t\t\t\t

We protect your data in different ways, including encryption to safeguard it against unauthorized access. Your data is protected by several layers of security, including, but not limited to, 256-bit AES encryption technology.<\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

What can I do to ensure my information is secure and private? <\/h6>\n\t\t\t\t\t\t\t

We recommend you enable two-factor authentication on your account and choose a unique password.<\/p>\n\t\t\t\t\t\t\t\t\t\t\t\t\t\t\t

What can I do if I find a security concern on Maple?<\/h6>\n\t\t\t\t\t\t\t

We take great pride in maintaining the privacy of your information. If you discover any security-related issues, please get in touch with us at security@getmaple.ca<\/a>.<\/p>\n\n\t\t\t\t\"13ec0df5c4b9656919a5df45621e1836\"\n

\n\t\tOur SOC 2 Type II report covers the security, confidentiality, and availability trust service criteria and is available upon request for review\n\t<\/h2>\n\t\t\t\t\"ProtectYourData_600x600\"\n

\n\t\tHow Maple manages vulnerabilities and what it means for your data\n\t<\/h3>\n\t

We’ve put several measures in place to ensure we meet the highest industry standards, including bringing in a third-party service provider weekly to scan our production environment for vulnerabilities and performing biannual penetration testing. A security incident response team (SIRT) also investigates and responds to security events reported by internal and external sources.<\/p>\n

To report a vulnerability or security concern, contact security@getmaple.ca<\/a> and include a proof-of-concept, tools used, and recreation steps. If you’re a pre-approved security researcher whose report is deemed critical, you may receive a bounty. Unapproved security researchers’ tests will not receive bounties.<\/p>\n

\n\t\tAI and Automated Processing\n\t<\/h3>\n\t

Maple utilizes artificial intelligence (AI) to enhance our services and improve your experience. This section outlines how we use AI, how we ensure our use of AI is responsible and ethical, and how we ensure our use of AI maintains our commitment to security and privacy.<\/p>\n

All AI functionality in the Maple Platform follows these principles:<\/p>\n