Strengthening Privacy & Data Security Compliance for a Mental Health App and EMR System
Main contact

Project scope
Categories
Cloud technologies Security (cybersecurity and IT security)Skills
data storage multi-factor authentication flutterflow supabase (software) ibm system p encryption technology ecosystems cyber security front end design information privacyThe primary objective of this project is to strengthen the privacy, security, and compliance framework of the OMALIFE digital ecosystem — which includes our mobile wellness app and therapist practice management software — to align with PIPEDA (Personal Information Protection and Electronic Documents Act) and PHIPA (Personal Health Information Protection Act) standards.
The project’s goal is to conduct a comprehensive cybersecurity and data-protection assessment with clear security measures of OMALIFE’s current technology infrastructure (built using FlutterFlow, React, Supabase, and AWS) and to identify, design, and prototype technical safeguards that protect sensitive health and personal information.
Working closely with our development team, participants will:
- Audit our data flows across the FlutterFlow (frontend) and Supabase (backend) environments.
- Identify vulnerabilities and compliance gaps in data storage, access control, and encryption.
- Build a Security Monitoring Dashboard that visualizes potential security events and anomalies.
- Draft a Technical Safeguard Implementation Plan outlining actions required to achieve and maintain compliance.
Deliverables:
- Data Flow and Privacy Risk Map showing where and how data is collected, transmitted, and stored.
- Vulnerability & Compliance Audit Report aligned to PIPEDA/PHIPA security safeguards.
- Prototype MFA Implementation (for therapist and admin access).
- Security Monitoring Dashboard (with sample metrics, e.g., failed logins, system errors, data access logs).
- Technical Safeguard Implementation Plan — practical roadmap to achieve full compliance.
Providing specialized knowledge in the project subject area, with industry context.
Sharing knowledge in specific technical skills, techniques, methodologies required for the project.
Direct involvement in project tasks, offering guidance, and demonstrating techniques.
Providing access to necessary tools, software, and resources required for project completion.
Scheduled check-ins to discuss progress, address challenges, and provide feedback.
About the company
Inner Compass Wellbeing is a beacon of wellness, dedicated to nurturing the individual and relational harmony within couples. At the heart of our agency lies a profound commitment to fostering well-being, not just for individuals but for the community at large. We believe that true wellness encompasses not only the absence of illness but also the presence of thriving relationships and a sense of belonging.
Our approach is innovative, guided by the ever-evolving landscape of psychology and therapy. We strive to break away from conventional methodologies, embracing novel techniques and modalities that resonate with the diverse needs of our clients. With a blend of evidence-based practices and cutting-edge interventions, we tailor our services to empower individuals and couples on their journey toward holistic wellness.
At Inner Compass Therapy, we understand that well-being is a multifaceted journey, influenced by various factors such as mental, emotional, and relational health. Therefore, our services encompass a comprehensive range of therapeutic modalities, including cognitive-behavioral therapy, mindfulness-based interventions, and experiential techniques. Whether it's navigating personal challenges or strengthening the bonds of partnership, we provide a safe and supportive space for growth and healing.
Main contact
