Security
Resident health information deserves more than a password. Here is how MapSorix Care is designed to protect it, in plain language, including the parts we can’t promise.
What we collect, why, and who can see it is set out in our privacy policy.
Built for HIPA
Under Saskatchewan’s Health Information Protection Act, your home is the trustee of its residents’ information. MapSorix Care is built around that: we handle the information only on your behalf, under a written service-provider agreement with each home, and never use it for anything else.
Built in Saskatoon, hosted in Canada
MapSorix Care is made by MapSorix Innovations Inc. in Saskatoon. Resident records are stored in data centres in Montréal, Canada, encrypted in storage (AES-256) and in transit. Health services numbers get an extra layer of encryption.
You control our access
We have no everyday access to your records in MapSorix Care. If support needs to look, we ask with a written reason. Your administrator chooses what we may see — settings only, or settings and resident records, read-only — and for how long: 1, 4 or 24 hours. You can end it at any time, and every screen we open is written to your own audit trail.
Each home kept separate
Every home’s records are walled off from every other home’s. The database refuses any request that doesn’t belong to the signed-in person’s home.
Strong sign-in
Administrators and nurses use a password plus a code from an authenticator app, or a text message as a backup. Changes to resident records and medication orders aren’t allowed without it.
Shared tablets done safely
PIN sign-in works only on tablets your administrator sets up. Each caregiver signs in with a personal PIN, the screen locks after 5 idle minutes, and a lost tablet can be locked from the office right away.
Nothing quietly changed
Medication entries, vital signs and incident reports can’t be edited or deleted. Corrections are added beside the original, with a name and a reason. Editing a care note saves a new version and keeps the earlier one.
A record of who did what
Every change, every print and every view of a health services number is logged. The log is tamper-evident with cryptographic hash checks: if an entry were altered or removed, the check would show it.
Ready for Ministry inspections
When a Ministry of Health inspector asks, administrators can print the inspection binder from Inspection binder, under Office in the menu: residents, staff, incidents, medication administration and staff hours for the last 7, 14 or 30 days. It also shows whether your privacy agreement with MapSorix is signed and which staff have read the privacy notice, and links to our draft Privacy Impact Assessment for your home to complete and adopt.
Offline continuity and paper backups
Rural internet drops. Care aides already signed in on an enrolled tablet keep charting, and entries sync by themselves when the connection returns. Signing in needs the connection, so print the daily medication record each morning as your paper backup.
Staff leave, access leaves
Removing a staff member blocks their next action in your home and turns off their PIN. Their past entries stay in the record.
Your records stay yours
Download any resident’s whole record, or every resident’s at once, whenever you like, at no cost. We never delete them because of a missed payment, and we delete them only when your home asks in writing, after its retention period. Your home then keeps a record of what was destroyed, when and how.
What we do differently
Three things worth asking any vendor about before you choose.
Common questions
Who owns the records?
Your home does. Under HIPA your home is the trustee of the information, and MapSorix stores it on your behalf under a written agreement.
Is everything stored in Canada?
Resident records are. A few things are handled outside Canada. The email address staff, family members and pharmacy staff sign in with is held by our sign-in provider, which may store it outside Canada, along with any backup phone number they add for text-message codes and an identifier for each home they belong to. No resident name and no health information is held there. The service that delivers our account emails — password links, invitations, setup links and billing notices — also handles those email addresses outside Canada, and those emails never contain a resident’s name or health information. The app’s bot check, which confirms that requests come from the real app, runs outside Canada and receives no resident information. Our systems’ logs, which hold account and record numbers, times and internet addresses but no names or health information, are kept for 30 days in a location that may be outside Canada. Payments are handled on our payment provider’s own page, which may also store data outside Canada and never receives health information.
What can our pharmacy see?
Only a pharmacy your administrator has paired with and approved sees anything, and only this: your home’s name and phone number, the requests you send it through the pharmacy portal (each with the resident’s name, room and bed, date of birth and allergies), and what became of the documents it sent you. It never sees your resident list or any resident’s record. Each person at the pharmacy has their own two-step sign-in, what they do is in your audit trail, and your administrator can end the pairing at any time. How the pharmacy portal works.
Can MapSorix staff read our residents’ records?
Not through MapSorix Care unless your administrator lets us in, as described above, and everything we open is in your audit trail. The people at MapSorix who run the hosting can reach stored data directly, as they must to keep the service running and restore it from backups. That access is limited to named people, is logged by the hosting provider, and is governed by our written agreement with your home rather than by the software.
Is MapSorix Care end-to-end encrypted?
No, and we won’t say it is. Information is encrypted in transit and in storage, and health services numbers carry an extra layer. MapSorix Care’s server has to read records to flag missed doses, catch a dose signed twice, build reports and keep the audit trail, which end-to-end encryption would prevent.
Does MapSorix Care make my home HIPA compliant?
No software can do that on its own. Compliance with HIPA is your home’s duty as trustee. MapSorix Care is built to help: records kept in Canada, access limited by role, a log of who changed what and of every print, export and health services number view, and a written agreement setting out what we may and may not do with your information.
What happens if our internet goes down?
Care aides keep charting on enrolled tablets, and entries sync when the connection returns. The printable daily medication record is your paper backup.
Do you use our data for advertising or analytics?
No. The app has no advertising and no third-party analytics.
How is MapSorix Care checked?
Every change is tested before it is released, including the security rules that decide who can see which records, and the software MapSorix Care is built with is checked for known security problems. An independent security test is planned before launch. If you discover a security concern or have a question about our practices, email care@mapsorix.com — we aim to acknowledge vulnerability reports within two business days.
What if there is a security incident?
We will tell your home in writing within 48 hours of confirming it, and help you with any notices you need to give.