Security overview
How ImmPilot protects your data, at rest, in transit, and in use.
Security is a core product commitment. This page summarises the controls in place. For a full description, request our Trust Center report from your success manager.
Data residency
All customer data is stored in Canadian data centres. Backups are geo-redundant within Canada. Data does not leave Canadian jurisdiction without explicit customer consent.
Encryption
All data is encrypted at rest with AES-256 and in transit with TLS 1.3. Database backups are separately encrypted with keys managed in a dedicated key management service.
Access control
Every workspace is fully isolated at the database level. No shared tables, no cross-tenant queries. Internal support access requires an approved ticket, is time-limited, and is fully audited.
Authentication
Multi-factor authentication is available on all plans and enforced by default on Practice and Enterprise. Single sign-on via SAML is available on Enterprise.