Greenspace Health Assessments

In order to view your results, you are required to log in to your account using your password. Passwords and responses are encrypted. Greenspace ensures your private and personal information and results are protected and safeguarded.

The only people that can see your personal information and assessment results are you and your care team.

The Greenspace administrator has the ability to view all participants using the platform, but each participant is identified by a unique code rather than their name. It is not possible for the Greenspace administrator to ascertain the identities of patients.

The assessments that are delivered to you by email or SMS don’t contain any personally identifying information or health information about you.

When you complete an assessment, the data will be sent to the server through secure channels (HTTPS, SSH, etc.). No patient information in conjunction with patient names is ever sent over unsecured email or other unsecured channels.

Greenspace’s commitment to information security within the organization is codified in its Information Security Policy. The policy provides direction and requirements with respect to the security of personal health information to guard against theft, loss, unauthorized use, disclosure, disruption, modification or disposal.

Prior to joining Greenspace, all employees are required to sign confidentiality agreements and undergo criminal background checks. Once joining Greenspace, employees receive extensive training with regard to Greenspace’s comprehensive information security policy, which is regularly reviewed and updated.

Greenspace stores all data and information in Canada with a secure cloud storage provider called Aptible.

Aptible is an industry leader in securely managing and storing confidential and highly sensitive healthcare information. Aptible has been  tested and passed audits by Kaiser Permanente, MD Anderson, UnitedHealth Group, Johns Hopkins, Stanford, and many others. In addition, Aptible is certified for compliance with ISO 27001, SOC 2, and HITRUST CSF.

Greenspace’s database runs in a private subnet (hidden from the outside internet) and access is restricted to Greenspace. Database traffic is encrypted in transit, and data is encrypted at rest using modern technology standards.

All passwords and security question responses are cryptographically salted and hashed before storage (using the PBKDF2 algorithm with a SHA256 hash and 10000 iterations). This means that they are heavily encrypted and are never stored in plain (viewable) text.

You may stop this assessment or any follow-up services at any time. However, in order for you to receive the full benefits of treatment we encourage you to continue.  Please discuss this with your therapist and/or group facilitator(s).

Upon completion of the program, a follow-up plan will be shared with you and your primary healthcare provider. A check-in will be provided several weeks after the completion of the program to assess the success of the program and follow-up plan. If required, individual assessments and direct connections to additional community support services may be provided.

Information obtained from the assessment will be discussed with you and included in your clinical notes, and a brief summary report of your treatment participation will be provided to your primary healthcare provider (family doctor), including starting date and sessions attended/missed.

Your privacy is extremely important to us.

We take this responsibility very seriously and are committed to protecting your privacy and safeguarding your personal information.

If you would like to discuss in further detail, please feel free to contact Greenspace Mental Health’s Chief Privacy Officer, Jeremy Weisz at [email protected].