Trust
Security at Toucan
Toucan holds benefit identity, eligibility and funding information, so access control is part of the data model rather than a screen-level filter. This page describes controls that are in place today; we do not claim certifications we have not completed.
Role-based access
Every account holds a role, and each role grants only the capabilities it needs.
Multi-tenant isolation
Company and provider data is separated in the database, so one organization cannot read another's records.
Encryption in transit
Traffic between browsers and Toucan is encrypted using TLS.
Secure authentication
Passwords are handled by our identity provider, with password-reset and verification flows built in.
Audit logging
Administrative actions, role changes and View As sessions are recorded with who, what and when.
Least-privilege access
Confidential commercial information is limited to the Toucan staff whose work requires it.
Vendor review
Third-party services are reviewed before they handle platform data.
Incident response planning
We are building and documenting our incident response process.
Information we do not collect
Toucan does not store Social Security numbers, medical records, full payment card numbers or provider account passwords. Employers never receive an employee's provider credentials or personal provider correspondence.
Security questions or reports: security@toucanbenefits.demo