Security & Privacy
Trust is the product.
KinDock handles the everyday lives of people supported and their families. Here's how we protect that: plainly, and without overstating what we do.
How access works
Boundaries at every layer
Organization, home, and person boundaries are enforced in the database — not just hidden in the interface. Access is decided server-side on every request.
Relationship-based access
A family connection reaches only the people they're explicitly approved for. Support-team access depends on active person assignments, not on employment alone.
Explicit audiences
Every post, photo, event, and message carries a clear audience, shown in plain language before anything is shared.
Secure invitations & feeds
Invitations expire and can be revoked. Personal calendar subscriptions are permission-aware and can be regenerated or revoked at any time.
Audit history
Sensitive actions — invitations, access and consent changes, content changes — are recorded in an uneditable history for accountability.
Controlled support access
Operator support access to a customer organization is time-limited and logged.
Hosting & data
KinDock's database, authentication, and file storage run on Supabase in the Central Canada region, so customer data at rest is held in Canada. Traffic is encrypted in transit, and data at rest is encrypted by our hosting provider.
Any service that would process personal data outside Canada is identified and reviewed before we introduce it, rather than added silently.
Subprocessors
| Service | Purpose | Status |
|---|---|---|
| Supabase (Central Canada region) | Database, authentication, and file storage | Available |
| Vercel | Application hosting and content delivery | Available |
| Maileroo | Transactional and digest email delivery | Available |
| Cloudflare Turnstile | Bot protection on public forms | Available |
| Muldoon Web Solutions Growth Hub | Demo and pilot request intake | Available |
| Stripe | Subscription billing | Planned |
Consent, retention & deletion
Consent is recorded per person and per area of sharing, and it drives what KinDock allows — withdrawing consent takes effect immediately. Retention and deletion are designed to be configurable, with soft deletion where appropriate so audit integrity is preserved. Default retention periods are still Under review.
What KinDock is not
KinDock is a communication and family-connection platform. It is not an electronic health record, case-management system, medication platform, or incident-reporting system, and it does not guarantee legal compliance or replace professional advice. It supports privacy-conscious workflows; your organization's own consent and privacy process still applies.
Availability labels reflect current status and may change. For specifics about your deployment, or a security and privacy review, please get in touch.
Have a security or privacy question?
We're glad to walk your team through it.