COMP 2022 Winter School Platform Infrastructure & Data Residency

The Canadian Organization of Medical Physicists (COMP) is the national professional body for medical physicists in Canada. It advances the use of physics in healthcare through research, standards, education, certification advocacy, and collaboration. Its annual scientific meeting and winter school support professional learning and networking.

Website infrastructure, the self-serve member portal, administrative tools, and membership software are deployed on Members Village. This specification outlines the data residency, security, and administrative access controls supporting COMP's online services.

Active Modules & Deployed Workflows

COMP runs within a multi-tenant cloud environment built for Canadian healthcare associations. Featured apps include, but are not limited to:

• Job Portal: Central repository of posted healthcare job opportunities.
• Membership: Individual and affiliate member applications and renewals, including partner organization memberships.
• Payments: To ensure PCI-DSS compliance, credit card data is processed directly via a payment gateway.
• Member portal: Authenticated self-serve portal for profile changes, communications and financial history.
• Website: Multi-website hosting environment, used for conferences and general bilingual content.
• Forms: Secure forms for registration and general data intake.

Privacy Frameworks

COMP maintains absolute ownership of all data records. CASL is enforced through granular opt-outs within the platform.

Core Infrastructure

Infrastructure operations adhere to the following protocols:

1. Data Residency:
   Primary databases, container clusters, and automated snapshots reside exclusively in Canadian data centers (Toronto, ON).
2. Network & Storage Encryption:
   Enforced HTTPS (TLS 1.3/1.2) in transit; AES-256 data encryption at rest.
3. Access Controls:
   Zero-trust architecture with MFA and SSH key authentication restricted to authorized system engineers.

Third-Party Integrations: Where COMP 2022 Winter School enables specialized external tools (e.g. embedded video streaming), data processed by those specific tools is subject to their agreements.

Governance & Inquiries

• For Member Records & Policy Requests:
  To update credentials, adjust communication preferences, or submit a formal data access inquiry, contact the COMP 2022 Winter School Office directly.
• For Infrastructure & Platform Support:
  Operational incident logs and system architecture inquiries are coordinated between COMP 2022 Winter School administration and the technical team at Members Village.