Built to protect the data families trust you with
Carewix handles sensitive information about children and families every day. Here's how we protect it.
Encryption everywhere
All data is encrypted in transit (TLS) and at rest. Passwords are never stored in plain text.
Role-based access control
Owners, supervisors, staff, and families each see only what their role needs — enforced at the database level, not just the app.
Multi-tenant data isolation
Every center's data is isolated using row-level security policies, so one organization can never query or see another's data — even in the event of an application bug.
Canadian-hosted infrastructure
Our primary database is hosted in Canada, supporting data residency expectations for Canadian childcare centers.
Vetted subprocessors
We rely on a small, deliberately chosen set of infrastructure providers (Supabase for database & auth, Resend for email) — each reviewed for their own security practices.
Least-privilege by default
New staff accounts start with the minimum access needed for their role; Owners explicitly grant anything beyond that.
Compliance approach
Carewix is designed around the requirements of Canadian privacy law, including the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial legislation. Full details on what we collect and why are in our Privacy Policy.
If you have a security question we haven't answered here — including requests from your center's own security or compliance review — reach out to support@carewix.com and we'll get back to you directly.