How secure is the data? How is it encrypted?

How secure is the data? How is it encrypted?

Our Security, Privacy and Risk Management document (available here: http://sumac.com/support/) describes in detail how encryption is used to prevent unauthorized access to, or interception of data, in a Sumac database. In brief:


1. Access to a database can be protected by database user IDs and passwords.

2. In addition, every user must have an individual user ID and password, which specifies that user's capabilities, in order to log in to the database.

3. Information that requires additional protection (e.g. payment details) is encrypted using a key management regime described in the Security and Risk Management document.

4. Communication between your website and a Sumac database is encrypted using PKI encryption (1024 bit keys).



    Our products got an upgrade!



    Some screenshots and help videos have been made using older versions of our products. Though your version's colours and themes may appear different than what you see here, the instructions, links and advice in this article are still accurate and useful!


      • Related Articles

      • What privacy and security is in place for Sumac Cloud?

        At Sumac, we go to great lengths to ensure your data is private and confidential. We do not, under any circumstances, share your data with any third parties. In addition, all our staff have agreed, in writing, to our confidential data handling ...
      • Where does my data reside?

        If you are using our Sumac Cloud hosting service, your data resides on our cloud servers hosted on Amazon Web Services (AWS). Our AWS servers are in Canada, and you can visit this page on the AWS website to learn more about AWS services in Canada. If ...
      • Societ Academy - Sumac Case Management

        Sumac Case Management Series This series of four short webinars will teach you everything you'll need to know about using Sumac for Case Management. We've kept each segment short so you can work these sessions into your schedule. You can register for ...
      • Reporting in Sumac Case Management for Health and Social Services

        Sumac has many built-in reports, as well as precise searching and flexible export options to customize your reporting. Using search and export for custom ad-hoc reporting This article tells you how to search using the search panel. You can also ...
      • Case Management Dashboard Statistics

        This article explains where the statistics that appear on your Dashboard for Case Management come from. Active Clients - quick access to the organization's current client list. This is a count of client contacts with ONE OR MORE Case Plan records ...
      Societ Academy

      Learn what you need to know, any time. Free!



      • High quality training on demand - sessions are available every day, so you can access training that fits into your schedule.
      • Training sessions that are easy to follow - helpful tips throughout each session, and access to training moderators ensure your questions get answered.
      • A certificate of completion - you can request a certificate of completion for every session you attend.