1. Shared Security Responsibilities
Security is a shared responsibility between PSW Pro and the users and organizations that rely on our platform. PSW Pro maintains technical and organizational safeguards to protect the platform, while users are responsible for protecting their credentials, managing access within their organization, and using the platform lawfully and professionally.
This page describes the security practices PSW Pro follows and the responsibilities that users and organization administrators carry. It is provided for informational purposes and does not replace our Terms of Service or Privacy Policy.
2. Data Transmission
Data transmitted between your browser and PSW Pro is encrypted using industry-standard transport layer security (TLS). This helps protect information such as login credentials, session data, and platform content while in transit over the internet.
3. Data Storage and Database Security
PSW Pro stores platform data in a PostgreSQL database hosted on secure cloud infrastructure. The database is protected by network-level controls and access restrictions.
Row-level security (RLS) policies are enabled on database tables to help ensure that users can only access records they are authorized to view based on their role and assignments. This means that a worker generally sees only the clients, shifts, and records assigned to them, while administrators have broader access within their organization.
4. Role-Based Access Control
PSW Pro uses role-based access control to differentiate between administrators and workers. Administrators can manage staff, clients, schedules, billing, and settings. Workers have access to the information and assignments relevant to their duties.
Organization administrators are responsible for:
- Assigning appropriate roles to users;
- Reviewing permissions regularly;
- Removing access when a worker leaves or changes roles;
- Ensuring that users only access information necessary for their authorized duties.
5. Account Authentication
Access to PSW Pro requires authentication. User passwords are hashed before storage—PSW Pro does not store passwords in plain text. Session management is designed to maintain secure, authenticated sessions.
Email verification may be used to help confirm that a user controls the email address associated with their account. Password reset and recovery procedures are available for users who lose access to their credentials.
6. Restricted Production Access
Access to production systems, databases, and infrastructure is restricted to authorized personnel with a legitimate need. Internal access is governed by role-based permissions and is intended to be limited to what is necessary for system operation, support, and maintenance.
7. Logging and Monitoring
PSW Pro maintains logs to help detect unusual activity, diagnose issues, and support investigations. Logging may include information such as access events, administrative actions, and system errors. Logs are retained according to operational and legal requirements.
8. Backups and Recovery
PSW Pro may maintain backups and recovery procedures as part of operating the platform. Backups help protect against data loss in the event of system failures or incidents. However, no backup system can guarantee that every record will always be available or recoverable. Users should maintain independent copies of records that are essential to their business or professional obligations.
9. Security Updates
PSW Pro works to keep platform software, dependencies, and infrastructure current. Security updates and patches are applied as part of ongoing maintenance to help address known vulnerabilities.
10. Service-Provider Reviews
PSW Pro uses third-party service providers for hosting, payment processing, email delivery, and other functions. We aim to select providers that maintain reasonable security practices. For more information about the providers we use, see our Third-Party Providers and Subprocessors page.
11. Incident Investigation and Notification
If a security incident is suspected or identified, PSW Pro will investigate and take reasonable steps to contain and address the issue. Where legally required or appropriate, we may notify affected users or authorities.
Detailed internal incident-response procedures are not published on this page to avoid creating information that could assist someone in attacking the platform.
12. Your Security Responsibilities
Users play a critical role in keeping PSW Pro secure. You are responsible for:
- Using strong, unique passwords;
- Not sharing login credentials with other people;
- Signing out when using shared or public devices;
- Maintaining current, updated software and browsers on your devices;
- Avoiding suspicious links, phishing attempts, and malware;
- Promptly removing access for workers who leave or change roles;
- Reporting suspected unauthorized access or account compromise immediately.
13. Reporting a Vulnerability
If you believe you have identified a security vulnerability in PSW Pro, please report it responsibly. Do not attempt to exploit, test, or publicly disclose the issue.
Email support@pswpro.ca with a description of the concern. We will investigate reports in good faith and appreciate responsible disclosure.
14. Reporting a Suspected Account Compromise
If you suspect your account or an account within your organization has been compromised, contact support@pswpro.ca immediately. Include relevant details such as the suspected timeframe and any unusual activity you observed.
PSW Pro may temporarily restrict access, require a password reset, revoke active sessions, or take other protective action while the situation is investigated.
15. No Absolute Security Guarantee
No online platform, website, application, network, transmission method, or storage system can guarantee absolute security. While PSW Pro uses safeguards designed to protect information, we cannot guarantee that unauthorized access, disclosure, or loss will never occur.
PSW Pro does not claim formal security certification under any standard unless such certification has been independently verified and documented. We continually review our practices and work to improve the protection of user and client information.
16. Contact
For security questions or to report a concern, contact:
PSW Pro
Email: support@pswpro.ca
Website: https://pswpro.ca
Last updated: August 16, 2026