Passwords are hashed using state-of-the-art, bcrypt technology.
Sessions are managed over the secure HTTPS protocol.
Data is transferred using the Transport Layer Security (TLS) 1.2 protocol and encrypted using RSA/SHA-256 encryption.
Data is stored in encrypted storage volumes and backed up in a Virtual Private Cloud (VPC) with dedicated firewalls in Canadian data centres.
Payments are processed by Stripe, a company which has received the highest level of PCI certification available in the payments processing industry.
Stripe utilizes best-in-class security tools and practices.