Hosted in Canada
Customer data is hosted in Canada, which supports the data residency expectations of Canadian healthcare, public sector and nonprofit organizations.
Independent penetration testing
The platform undergoes independent penetration testing. A summary of the most recent test is available to customers on request.
Role-based access
Permissions follow roles. Staff see the training, policies, regulations and actions assigned to them; administrators control who can view, edit and approve.
Human review of AI
AI recommendations are reviewed by your team before a policy changes, an action is assigned or anyone is notified.
No patient or client data
Riskophia manages obligations, policies, training records, evidence and actions. It is not a clinical or client record system.
Security overview on request
Our current security overview, covering hosting, access control and testing, is available to prospective customers during evaluation.
Riskophia does not yet hold a SOC 2 report or ISO 27001 certification. Certifications and audit reports will be published on this page once obtained. To request the security overview or report a security concern, write to info@riskophia.ca.
Need the security overview for your evaluation?
Ask during your demo and we will send it with the penetration test summary.