AES-256
At rest & in transit
Canada
Data hosting
RLS
Per-user isolation
Law 25
Canadian privacy law
How we protect your data
Data Encryption
Your data is encrypted in transit (TLS 1.3) and at rest (AES-256), end to end.
Data Hosted in Canada
Your data and photos are kept on Canadian cloud infrastructure.
Row-Level Security
Every record is tied to its owner, with access enforced at the database layer.
Managed Authentication
Sign-ins are protected by hashed passwords and secure session management.
Managed Infrastructure
Security patches and database backups are handled by our cloud infrastructure.
You Own Your Data
You retain full ownership. Export anytime, delete on demand, no vendor lock-in.
Privacy & regulatory frameworks
Law 25 (Quebec)
Habita is built with Quebec's Law 25, which governs the protection of personal information, in mind.
PIPEDA (Canada)
We follow PIPEDA principles for handling personal information in Canada.
Data Sovereignty
Your data stays hosted on Canadian infrastructure.
Industry Standards
Reports follow APCHQ practices and the BNQ 3009-500 standard.
Data Protection & Privacy Controls
Every record is isolated by row-level security (RLS)
Data encrypted in transit (TLS 1.3) and at rest (AES-256)
Hosted on Canadian cloud infrastructure
Automated database backups
Managed authentication with hashed passwords
Secure report sharing via a link you control
Export your reports anytime
Request deletion of your data