Security & privacy

Built so your pharmacy’s data stays your pharmacy’s

Your formulas, pack stats and procedures are part of how your pharmacy works. Here is how SerenRx looks after them.

Stored in Canada

Your pharmacy’s database is hosted in a Canadian data centre. Our application servers, which process requests but don’t store your records, run in North America.

Isolated per pharmacy

Every record belongs to one pharmacy, and the database itself enforces it with row-level security. Even a mistake in application code couldn’t show one pharmacy another’s data. Automated tests check this on every release.

Encrypted everywhere

All traffic uses HTTPS, and browsers are told never to connect without it. Data is encrypted at rest by our database provider.

No patient information

Formulator works with formulations, ingredients and procedures. It has no fields for patient names, prescriptions or health information, and our terms ask users not to enter any.

Invite-only accounts

There is no public sign-up. Your pharmacy’s admin invites each person by email, chooses their role, and can deactivate access at any time. Passwords must be at least 10 characters and are never stored in readable form.

Nightly encrypted backups

Your data is backed up every night, encrypted, and kept for 30 days. We have tested restoring from these backups, and the procedure is documented.

Who can see your data

Only the people your pharmacy invites can sign in to your workspace. Staff can view your reference data and use the calculators; admins can also change records, settings and users.

SerenRx accesses a pharmacy’s data only to operate the service, keep it backed up, and help when your pharmacy asks us to. We don’t sell data, show ads, or use tracking cookies, in the app or on this website.

The services we rely on

  • Supabase for the database and sign-in, hosted in Canada.
  • Render to run the application and this website.
  • Resend to deliver account emails such as invitations and password resets.

Reporting a security concern

If you think you’ve found a security issue, please email security@serenrx.ca before sharing it publicly. We’ll acknowledge your report and keep you updated while we fix it.