Security
How UnicornCRM looks after your practice's data, in plain language.
Where data is stored
Your clients' records are stored in Canada.*
The app, the database and file storage run in Canadian data centres. Optional services hosted outside Canada are labelled in the app before a practice turns them on. Our Privacy Policy describes them.
Sign-in and sessions
Staff sessions in the practice app time out after 15 minutes of inactivity.
Access
Each practice sees only its own records. Within a practice, staff access is based on their role. Front desk staff cannot open clinical notes.
Audit
An audit log records who views and changes client records.
Encryption
- The database and file storage are encrypted at rest.
- Data is encrypted in transit over HTTPS (TLS).
Questions
Email privacy@unicorncrm.ca with any security or privacy question.
* Information leaves Canada only when you turn on an optional service marked as hosted outside Canada or add your own video meeting link; when an email or text arrives at the recipient's own email or phone provider; or when a staff phone or browser shows a notification (a short alert, never a client's name or appointment details). Jane booking emails pass through your practice's own email provider before they reach us.
Infrastructure: Amazon Web Services (AWS), Canada (Central) region.