Security
Security is the floor , not the feature.
MAC carries some of the most sensitive information in healthcare — patient referrals — between doctors and clinics. We design the network so that protecting that data is the default, not an add-on.
- PHIPA
- PIPEDA
- SOC 2
- HIPAA‑aligned
Our practices
Defense in depth, front to back.
-
Encryption
Encrypted in transit & at rest
Traffic is protected with modern TLS, and data is encrypted at rest. Secrets and keys are managed separately from application data.
-
Access control
Least privilege, always logged
Personal health information is reachable only by the people and services that need it for a specific task. Access is role-based and audit-logged.
-
Data residency
Kept in Canada
We aim to store and process personal health information on Canadian infrastructure, with safeguards documented for any exception.
-
Monitoring
Watched around the clock
Logging, alerting, and anomaly detection help us spot and respond to unusual activity, backed by an incident-response process.
-
Vendor diligence
Partners held to our bar
Sub-processors, including our practice-management platform provider, operate under written data-protection agreements and are reviewed before and during use.
-
Secure development
Built securely by default
Code review, dependency management, least-privilege service accounts, and environment separation are part of how we ship.
Responsible disclosure
Found something? Tell us.
We welcome reports from security researchers. If you believe you've found a vulnerability, contact us before disclosing it publicly and give us a reasonable window to remediate. We won't pursue good-faith research that respects patient privacy and avoids service disruption.
Report a vulnerability
security@medaccesscorp.com
Please include steps to reproduce, affected URLs, and your contact details. Do not access or modify data that isn't yours.