Every scanner below is run by a third party. Click any badge to re-run the scan against Meridian yourself. No login required, no cooperation from us needed.

TLS & transport encryption. A+ on all 4 Meridian domains · TLS 1.3 · HSTS preload.
Verify on ssllabs.com →Web security headers. A+ on the public site · 125 out of 130.
Verify on mozilla.org →Every document, every record, every backup · rotating keys.
PIPEDA · BC PIPA · GDPR. Every firm's data is walled off. Firm A can't see Firm B's.
The #1 concern every RCIC has before adopting new technology. We built Meridian around this principle from day one.

Your client data is never shared with third parties. Not advertisers. Not analytics companies. Not partners. Not anyone.
Documents are encrypted at rest with keys unique to your firm. Staff access needs the owner's approval, can be revoked in one click, and every action is logged.
Built to meet the CICC Code of Professional Conduct and RCIC regulatory requirements. Compliance baked into every layer.
Export anytime. Delete anytime. Cancel anytime and everything goes with you. No lock-in contracts, no hostage games.
TLS 1.3 in transit, AES-256 at rest. Encryption keys unique to your firm. No crossover between firms. Ever.
Fully compliant with PIPEDA's 10 fair information principles and provincial privacy legislation, including BC and Alberta PIPA.
What is in place today, labelled plainly. No dressing up.
Read our complete Privacy Policy, Terms of Service, or browse the full Legal & Trust Center.
Security is the first thing every RCIC asks about. We'll walk you through data isolation, audit logs, and exporting your data, on a real account.