Does Veribook Comply with Privacy Standards?

Amobius Group Inc. seeks to comply with all legal requirements relating to privacy and security in the jurisdiction which we provide services. This includes, for example, Ontario’s Personal Health Information Protection Act that sets forth privacy and security requirements for any entity that uses or discloses protected health information (“PHI”) - our PHIPA compliance ensures that all your information will be secure.

Amobius Group Inc. incorporates administrative, procedural, and security safeguards, including at least those detailed below. As a core organizational principle, Amobius Group Inc. considers the protection of personal information extremely important. As such, we do not sell, rent, or otherwise disclose customer information, including appointment or booking information that may be considered PHI, to third-parties except to comply with legal requirements. Our privacy policy more generally is available here.

In furtherance of our privacy policy, we have adopted a variety of administrative and technological safeguards, including at least the following:

• customer information is encrypted during transmission using 128-bit SSL encryption;

• user accounts are secured with unique usernames and passwords having a minimum complexity;

• our application security model prevents any customer from accessing another’s data;

• production environments and databases are electronically secured by firewalls and limited administrator access, and physically secured by 24/7 building security and biometric access authentication;

• our production environments and database are hosted in Toronto, Ontario, Canada;

• off-site backups are created at least on a daily basis and stored in an encrypted state;

• Amobius Group Inc. access to customer data is limited to only two senior staff members familiar with applicable privacy laws;

• Selective and customizable collection of information from clients;

• emergency access capabilities; and

• a long-term access audit log;

Importantly, we have concluded pursuant to a risk analysis of the PHI expected to be collected through the use of our software services that un-encrypted transmission of customer information (including potentially PHI or information permitting access to PHI) via e-mail is typically appropriate and reasonable, although we take steps to exclude from emails even minimally private information such as customized reasons for appointments.

This includes automated password retrieval systems predicated solely upon access to a user account’s corresponding e-mail address.

Independent privacy impact and threat risk assessments have been completed by a qualified third-party firm, using industry recognized methodologies to identify and qualify vulnerabilities and risks.

Please do not hesitate to contact us at legal@veribook.com if there are any questions related to Amobius Group Inc.’s policies or operations.