Encryption Standards

All sensitive data is encrypted using AES-256 encryption at rest and TLS 1.3 for data in transit. Payroll records, financial documents, and employee information receive the highest level of encryption.

Access Control

Every data request is validated through our permission system:

• User authentication (who is requesting the data)
• Business workspace membership (which business do they belong to)
• Role verification (what is their role in that business)
• Specific permission checks (are they authorized for this specific action)

Data Isolation

Personal and business data are completely isolated. Business workspaces are segregated so partners only see businesses they are explicitly assigned to. Employees only see their own payroll and profile information.

Audit Logging

All sensitive data access is logged, including who viewed, edited, downloaded, or deleted information. Audit logs are immutable and available for compliance review.

Backup & Disaster Recovery

Your data is automatically backed up to geographically redundant, encrypted cloud storage. We maintain backup and disaster recovery procedures to ensure data availability.

File Upload Security

All uploaded files (receipts, statements, invoices, documents) are:

• Scanned for malware and viruses
• Encrypted before storage
• Protected with access controls
• Available only to authorized users

Incident Response

In the event of a security incident, we will notify affected users within 72 hours. We maintain an incident response plan and regularly test our security procedures.

Compliance

We comply with applicable data protection regulations including privacy laws and financial regulations. Our security practices undergo regular third-party audits and assessments.

Contact Us

For questions about data protection, email info@andsmormovers.ca or Jonnoyanderson@gmail.com.
Address: 1460 The Queensway, Etobicoke, ON, M8Z 1S4