Security Center

At Oura Ring Canada, the security and privacy of our members’ data are foundational to our mission. We are committed to safeguarding personal data through robust security measures and transparent practices.

Data Flow and Protection

The OuraRings connects to the Oura App via Bluetooth using Secure BLE. Data is encrypted in transit between the Oura App and the Oura Cloud using TLS 1.2 or greater. Our primary infrastructure is hosted on AWS, and our databases utilize AES 256 encryption at rest by default.

In addition to the Oura App, members can access dashboards, exports, and more directly on Oura on the Web (via cloud.ouraring.com), where access requires authentication and is encrypted in transit between the site and user using TLS 1.2 or greater.

Security Measures

Education and Training

At Oura ring Canada, we prioritize security awareness training, which includes a mix of cyber hygiene education, interactive phishing simulations, privacy training, and specialized security training tailored to specific roles.

Device Management

We maintain strict policies for workstations and mobile devices, including automatic screen locks, authentication requirements, enforced encryption at rest, and endpoint protection.

Cloud Security

We complement AWS’s high-security standards with additional measures such as threat detection and response, infrastructure entitlements management, vulnerability scanning and management, penetration testing, and change control.

Vulnerability Management

Ourarings engages in continuous vulnerability and patch management, including regular penetration tests and automated scanning.

Compliance and Regulations

GDPR and International Transfers

We adhere to the General Data Protection Regulation (GDPR) and other international frameworks, ensuring that personal data is handled with the highest standards of privacy and security.

Vulnerability Disclosure

We highly value the contributions of security researchers who help us maintain a secure environment for our members. While we do not currently run a formal bug bounty program, we welcome and appreciate vulnerability reports and tips. If a potential security issue is discovered, please contact our security team directly at support@ouraringcanada.ca. All reports will receive the attention they deserve, and submitters will be kept informed about any future bug bounty program launches.

At Ourarings, we protect our members’ data, allowing them to focus on what matters most: their wellbeing.