Protecting your personal information and property is our top priority. We have strict measures in place to ensure confidentiality and prevent unauthorized access. Your trust is essential, and we are committed to maintaining a safe and secure environment.

We use state-of-the-art technologies and advanced security practices to prevent unauthorized access and misuse of your information. In addition, we are committed to complying with applicable privacy and data protection laws and regulations.

Authentication and Access Control

Our authentication system uses the PBKDF2 algorithm with an SHA256 hash, a NIST-recommended password stretching mechanism. Multi-factor authentication (MFA) is mandatory for all locker administrators.

Data encryption and localization

All information stored in our systems, as well as logs and backups are encrypted at rest with Advanced Encryption Standard 256-bit (AES-256).

Personal information is stored in Canada. Mainly in Quebec and Ontario with real-time replication.

Penetration Testing

We perform third-party penetration testing on an annual basis. These tests include, among other things:

• Business logic flaws
• Authorization bypass
• Privilege escalation
• Non-authenticated access
• Access control bypass
• Session management flaws
• Injection flaws
• Cross Site Scripting (XSS)
• Cross-site request forgery
• Sensitive data exposure
• Unvalidated redirects and forwards

Other security measures

• Multi-factor authentication to internal systems
• Pipeline with automatic vulnerability analysis
• Web Application Firewall (WAF) with DDOS protection
• Cybersecurity training for developers

Protection of personal information (law 25)

The personal information of members and recipients is collected in order to allow the delivery of their goods through our smart lockers.

List of third-party providers with whom Expedibox shares personal information:

• Mailgun (email notifications)
• Twilio (SMS and voice notifications)
• Sentry (error reports)

You can make a request to remove your personal information from our systems at support@expedibox.com