Caredove Legal Home Solutions Insights Contact Create an Account Sign in Home About Our Solutions CBO Essentials CBO Advanced Community eRequest Clinician eRefer Features Appointment Booking Public Sign-Up Caredove Forms WebBuilder Integrations Integrations Careers Blog Legal and Privacy Contact Sign in Create an Account Helping community care grow better. We're secure and compliant PHIPA, PIPEDA & HIPAA Compliant Caredove protects all personal health information (PHI) according to Canadian and United States federal standards. Security & Privacy Compliant Caredove's servers are hosted on AWS in Montreal, so your personal health information never leaves Canada. Third Party Compliance Tested Caredove regularly has objective independent examinations & audits to ensure we are compliant up to trusted third party standards. The following documents constitute Caredove's legal agreement framework. Terms & Conditions Terms of use applying to anybody using Caredove. Premium Service Agreement Legal agreement for premium service subscriptions. Privacy Policy Mandatory user requirements and responsibilities put in place for the protection of client personal health information. Privacy Incident & Breach Management How we define a privacy breach, and what actions we take if a breach takes place. Data Security Procedures to ensure that personal information of our users and their clients is kept private and secure, in accordance with our Privacy Policy. Roles & Responsibilities Additional permissions & policies for users with Caredove Referral Network accounts. Caredove & HIPAA Our HIPAA compliance helps you remain compliant. HIPAA is relevant for United States customers only. Cookie Policy We uses cookies to provide you with features in our Services, such as access to secure areas. Caredove API Usage Agreement Agreement governing secure, authorized Caredove API use by integration partners for referral processing. Soc 2 Type 2 Certified Caredove has successfully completed an independent SOC 2 Type II examination, validating our commitment to protecting client data with the highest standards of security and reliability. This certification gives our partners and customers confidence that sensitive information is handled with integrity, our systems are dependable, and we uphold trust at every step of care delivery. Learn more about SOC 2 Privacy & Security FAQs Frequently asked questions related to Privacy, Data and Security. Is Caredove secure for personal health information? Yes! Caredove has implemented a comprehensive Privacy and Security program that ensures the information of our customers and patients is kept private and secure. This includes Personal Information (PI) and Personal Health Information (PHI) lifecycle management, physical, technical and process safeguards. Is Caredove PIPEDA compliant? Yes! In Canada the Personal Information Protection and Electronic Documents Act (PIPEDA) establishes laws that regulate the collection, use and disclosure of personal information. Caredove adheres to the 10 principles that businesses must follow, and these are detailed on our Privacy Policy page. Is Caredove HIPAA compliant? Yes! U.S. customers need Caredove to be HIPAA compliant. Caredove uses a fully automated managed services platform provided by an AWS Healthcare Competency Partner that provides coverage for over 200 HITRUST Common Security Framework controls mapped directly to the HIPAA regulations. See more details on our Caredove & HIPAA page. Where is Caredove hosted? Caredove is hosted wherever you need it to be! Caredove uses Amazon Web Services (AWS) in the Canada Region for all Canadian customers. We have access to all AWS locations worldwide so for our international customers we can store data in any region required for compliance. We only use AWS Healthcare certified processes. For Canada see AWS in Canada. How can Caredove help with a Privacy Impact Assessment (PIA)? We have developed a comprehensive approach to privacy and security and have created the Caredove Trust Report, an online resource that contains everything you need to know about Caredove for your PIA. You can find more information about this in our article "Ensuring Patient Privacy in the Digital Age: How Caredove Empowers Healthcare Networks to Conduct Thorough Impact Assessments" How does Caredove handle patient consent? Caredove does not directly acquire consent from patients for the collection of PHI. Gathering consent is the obligation of the person collecting the PHI and the acquisition and revoking of consent is recorded in Caredove. When a patient self-refers through Caredove the patient will be asked to provide consent in a click-through agreement. What measures does Caredove have in place to protect client data in the event of a cyber attack or ransom attack? To prevent malicious software including ransomware, Caredove has adopted a defense in depth approach, with many layers of protection that would prevent exposure or loss of data. ‍ These measures include but are not limited to employee education, encryption, and acceptable use policies and procedures. Caredove’s systems are protected with: anti-malware scanning to stop software from attacking a server; network security including intrusion prevention which stops vulnerabilities from being exploited and the resulting potential installation of malicious software (including ransomware); system security, including integrity monitoring which can provide visibility of system changes that represent malicious software activity; Web Reputation, which blocks outbound communication to known bad domains. Learn more about how Caredove protects client data in our Data Security Policy. How would Caredove respond to a data incident/breach or ransomware attack? What happens in the case of a privacy incident or breach? In the unlikely event that an incident or breach occurs, Caredove has processes in place to notify clients and recover any compromised data. We communicate openly with parties according to our published Privacy Incident & Breach Management policy to keep people well informed and Caredove complies with all legal requirements. To recover compromised or corrupted data we would restore from our encrypted backup server. Caredove tests the backups at least monthly to ensure the integrity of the backup and restore processes.‍ As an additional measure to prevent the risk of data loss, agencies can choose to synchronize their Caredove data with their local systems via an integration using Caredove’s API. Where do I learn more? Links to our legal agreements and Privacy and Security Program can be found at the top of this page. If you wish to speak with someone at Caredove, please email us or call us at 416-655-7997, or toll free in North America at 1-833-567-3683. Is Caredove secure when connected to a website? You can connect Caredove service requests and search sites to any website via standard web-links or Caredove's embed widget. The embed widget uses standard secure iFrame functionality which are authorized by Caredove for approved domains. ‍ Caredove customers can purchase a license for our WebBuilder content management system with specialized features that allow them to publish service information easily online. They can also bring their own website and their own hosting on platforms such as WordPress, Wix, Squarespace or Drupal. In all cases, the same approach to launching a Caredove service request is used. The Caredove referral management system is sandboxed to be entirely separate from the embedding, or referring, website. ‍ This means that when anyone searches or requests a service from any website, it launches our Referral Management application as a separate application which is subject to all of our stringent security protocols. ‍ No PHI information from the integrating website is provided to Caredove via an embedded Caredove widget. The only information shared with an embedded widget is widget layout, size, etc. All collection and handling of PHI is done with the launched Caredove application. Caredove’s security program documentation can be found above.‍ Caredove’s WebBuilder is an optional add-on feature to Caredove, that is used to build marketing-style websites. Its underlying code, hosting and management is completely separate from Caredove. It is connected to Caredove with the same methods as any other external website, only via standard weblinks or iFrames (for authorized domains). Our WebBuilder is a customization built on the Duda web platform that allows for easy integration with Caredove via custom widgets and templates. Duda is a globally reputable and leading company in web building. You can view their security measures here. Have any more questions? Contact our Security and Legal Team Everything you need to streamline access to service and improve care transitions, today. Solutions CBO Essentials CBO Advanced Community eRequest Clinician eRefer Product Appointment Booking Public Sign-Up Caredove Forms Product Reviews WebBuilder Integrations Company About Blog Careers Caredove Support Changelog Legal and Privacy Newsletter Sign-Up Contact © 2026 Caredove Inc. | Proudly designed & developed in Canada | Terms | Privacy Our solutions CBO Essentials Receive free referrals from your website or local search sites CBO Advanced Improve your intake process with advanced features Community eRequest Make it easy and secure for the public to request service right from your website Clinician eRefer Launch a custom localized community service search interface for Central Intake & clinicians FEATURES Appointment Booking Book appointments and connect with confidence Public Sign-up Public sign-up and appointments made simple Caredove Forms Powerful referral forms made simple Caredove WebBuilder Build better websites connected to your services Integrations Connect with other commonly used applications Improving Access Mental Health & Addictions Connect clients to a network of supportive organizations, virtually or in person Community Support & Seniors Receive more service requests and manage your intake process with ease Child Development Services Advanced screening tools to help identify and route referrals Home Care Intake solutions for the home care sector, PSWs, midwifery, in-home nursing and therapy Ontario Health Teams Software designed to simplify eReferrals across a network of trusted Ontario Health Team partners. Resources Help Centre Support Careers Legal & Privacy Newsletter Sign-Up Featured article Community Paramedicine: Embracing a Digital-First Approach to Care By Rob Babos • October 5, 2023 In the traditional model of primary care, physicians provide health services to their patients in their offices, in nursing homes and in hospitals. This role is increasingly being shared with nurse practitioners and other health care professionals who work together to deliver care and provide referrals to other supportive community based healthcare services. These primary care teams typically operate in clinics such as Family Health Teams or Community Health Centres, which can be inaccessible to underprivileged populations due to the increasing shortage of family doctors who can take on new patients, or simply because transportation barriers to get to a clinic, exist. ‍ In an ever-evolving healthcare landscape, innovative models of care are emerging to address the diverse needs of communities in ways that will increase efficiencies and reduce costs. One such nontraditional and direct-to-consumer approach is community paramedicine, a concept that is transforming the way healthcare is delivered and is proving to be a lifeline for underserved and remote populations. The community paramedicine model is bridging the gap between emergency medical services and primary care, ensuring timely and personalized interventions that enhance the overall health and wellbeing of communities. …