Security & Data Handling

Company access

Each user signs in with an individual account. Server-side checks apply company membership, role, permissions and site access to protected records and files. Owners manage invitations and team access. Review access when people change roles or leave your company.

Records you can trace

Saved forms and documents are organized in Documents & Resources. Record history identifies revisions and recorded activity. Signatures and acknowledgements relate to the record version presented to the signer. Exported copies should be reviewed for the correct site, dates and version before distribution.

These features support recordkeeping and review. They do not certify the accuracy of a submission or guarantee regulatory compliance.

Storage and downloads

Submitted records are stored in the company workspace; uploaded files use service-managed object storage. Device drafts and unsent messages are separate from submitted records. Wait for the save confirmation and reopen important records to verify them.

PDF, CSV and audit exports are available within the user’s permissions. Once downloaded or shared outside the Hub, a copy is controlled by its recipient. Use company-approved devices and storage locations. Current upload limits are shown in Account & Settings → Company Storage & Exports.

Account and device protection

Sign-in persists on the device so users can return to their workspace. Use a screen lock, keep the operating system current and sign out of shared devices. Passwords are handled by the authentication provider. NorthCan support will never ask you to send your password.

Providers and optional AI

Service providers support authentication, hosting, database and file storage, email, payments and optional AI replies. Review the Privacy Policy for providers, processing purposes and international transfers.

The AI assistant asks for your agreement before sending a conversation to OpenAI. Use only information your company authorizes, and have a competent person review generated material before workplace use.

Retention and account closure

Closing a login does not automatically erase company safety records, signatures or audit history. Retention depends on the records, company instructions and applicable obligations. Read the retention and closure details or request a review through NorthCan support.

Organizational reviews

Contact NorthCan before rollout if your organization requires specific hosting regions, identity integration, retention rules, recovery objectives or contractual service levels. Confirm those requirements in writing. This page is a description of current product controls, not an independent security certification or a service-level guarantee.

Report a problem

Contact NorthCan support with your company, device, affected screen and the time of the issue. For suspected unauthorized access, stop sharing the affected link or device and contact your company owner promptly. Do not send passwords, authentication tokens or confidential records in the initial report.

Contact NorthCan

Privacy, billing and service enquiries: Chris@NorthCanSafety.com
519-994-2082 · Ontario, Canada

Include your account email and company so we can route your request. Do not send passwords, card details or unnecessary sensitive information.