Draft, pending legal review. This is a plain-language summary for design, not legal advice. It should be reviewed by Ontario counsel before the site goes live.
Data location
Your data is stored at rest in Canada, in the AWS CA-CENTRAL-1 region (our database is hosted on Supabase).
Application processing and email delivery run on infrastructure located in the United States and the European Union. As a result, your data is processed outside Canada while in transit and during processing. Data is encrypted in transit between regions.
Access
Access is protected by managed authentication, with controls that separate one company's data from another's.
Payments
Payments are handled by a PCI-compliant payment processor. We do not store full card numbers.
In transit
Data is encrypted in transit.
Reporting a concern
Report a security concern to security@wonable.io.