KOVA handles some of the most personal data your people have. This page sets out how we treat it, so your privacy, security, and procurement teams can review us before we ever meet.
Each employee owns their individual results. They can see their own data, and only they can. You receive aggregate, de-identified reporting only. No individual result reaches the employer.
KOVA delivers its program on technology infrastructure designed to meet the personal-health-information privacy requirements of each market it operates in, including applicable Canadian federal and provincial privacy law and US health-privacy standards. Data is handled by our technology provider in line with those requirements.
Employee data is stored in the member's own country: data for US-based employees is held on US servers, and data for Canadian employees on Canadian servers, through our technology provider's regional infrastructure.
Data is encrypted in transit and at rest, with role-based access limited to those who need it to deliver the program. Full security documentation, including our technology provider's controls, is available to your procurement team on request.
KOVA is working toward independent security attestation. Ask us where we are.
Participation is voluntary. At the first session, each employee completes a digital consent, waiver, and liability form through the platform, covering data collection, storage, and the specific assessments they'll take part in. Consent is confirmed before anyone participates: at an on-site activation, a coach checks that it's in place, and an employee who hasn't consented can't take part until they do. Employees can withdraw at any time. On withdrawal, their data is archived and made inaccessible, then retained only as long as the applicable regulations in their country require, before being handled accordingly.
The program is delivered by KOVA's trained program team. Biomarker results are reviewed with each employee individually to explain what the markers mean and how to act on them. Results outside typical ranges come with a recommendation to follow up with the employee's own physician. KOVA does not diagnose or provide medical treatment.
We are used to security questionnaires and are happy to complete yours. Request our vendor review package →
Send us your questionnaire, or book a conversation.