Return to work safely and quickly with the Personal Protective App (PPA)

• The screening questionnaire is based on the latest assessment questions available from public health officials (i.e. CDC, PHAC, Province of Ontario, etc.).
• In Canada, the self-assessment questions used in the app are modeled after the Province of Ontario’s COVID-19 Self Assessment Tool.
• For US-based organizations, the screening questions are modeled after the Center for Disease Control’s (CDC) COVID-19 Self-Checker.

• Of course! However, we recommend that you use health screening questions that are aligned with your local public health authorities’ guidance.
• Our screening questionnaire is based on the latest assessment questions available from public health officials in your jurisdiction (i.e. CDC, PHAC, Province of Ontario, etc.). The legal advice we received from an employer’s perspective is that the assessment questions follow the exact questions offered by the public health officials. Deviating from guidance from public health officials was highly discouraged by legal counsel.
• Note: If you change the assessment questions, we will lose the ability to automatically push new updates to your assessment questionnaire if public health authorities change the assessment criteria in the future . This means that changing the questions will be a manual process and your responsibility to request of our team. We consider customization of the questionnaire billable work and would encourage you to reach out to discuss further.

Yes. We will update the health self-assessment questions as guidance from public health officials around COVID-19 screening evolves and always provide our partners with the ability to update their assessments.

No, there is no limit on the number of users.

There is a soft limit of 50 assessments per month for each employee but if more assessments are required, please let us know and we would be happy to discuss further.

No. Users can complete the health self-assessment offline. However, an internet connection is required to upload the responses to the system, meaning that employers will not be notified of a user’s completed self-assessment and receive timely reporting data. When a user has an active internet connection, the app will automatically sync the data with the system.

We take security seriously. Our platform is hosted on Microsoft’s Azure cloud infrastructure, which enables us to deliver highly scalable, available, and fault-tolerant services. Our application architecture has been designed to leverage Azure’s strong geo-redundancy, replication, and recovery options, and follows Microsoft recommended best practices and processes. Azure meets a broad set of international and industry-specific security, privacy, and compliance standards including ISO 27001, HIPAA, FedRAMP, SOC 1, and SOC 2.

• Data Replication and Backup

• • • Data generated and stored on the platform is replicated between two physical data centers via Azure’s paired region approach.  We utilize Azure geo-replication and geo-redundancy features for storage and database operations, guided by Microsoft’s recommended practices.  Point-in-time backups are also automatically executed hourly for database and daily for general file storage.

• System Failover and Disaster Recover

• • • Our application architecture follows best practices to ensure failover and recovery can occur across multiple levels and scenarios.  At a hosting level, the platform is deployed across a primary and secondary data center pair.  These data centers are sufficiently physically distant from each other to reduce the likelihood of natural disasters, civil unrest, power outages, or physical network outages affecting both regions at once.  In the event of tier failure or outright disaster, failover procedures will transition services from our primary to the secondary center.

• Network and Platform Security

• • Our server instances run behind Azure’s comprehensive firewall and load balancing solution.  Inbound connections from both the Internet and remote management ports are blocked by default, with access tightly restricted to legitimate protocol and traffic only.  All firewall configurations are version controlled and peer-reviewed as part of our standard change management processes. For more information on Azure-specific security, refer to Microsoft’s self-assessment paper here: https://cloudsecurityalliance.org/star-registrant/microsoft-azure
  • Backend access to databases, storage accounts and server instances is restricted to qualified Go Evo team members only, with all actions performed using Microsoft provided management tools across SSL secured connections.
  • All app, web browser and REST API interactions with the Go Evo platform occur using 256 bit SSL/TLS encryption (HTTPS protocol).  Users are required to log in with an email and password, and their login and access activity is recorded.  API access is authenticated against a platform generated 32 character secret key token. Passwords stored on mobile devices and Go Evo servers are always encrypted using AES 256 bit encryption algorithms according to industry standard practices. When a user account is terminated or deactivated, an automatic wipe of local app data is executed when/if the user next attempts to access the app.
  • Reach out to our team for more details on our platform’s security and architecture. 

At Go Evo, only system administrators have access to your data and they are bound by strict privacy and confidentiality agreements. Within your organization, only properly authenticated users with appropriate permissions (i.e. administrators) can view employee data.

• The platform enforces a simple 6 character minimum length password, with a focus on making it easy for users to get started with our service. Aside from our default Basic policy, there are two further options based on current best practice recommendations:
• NIST SP 800-63
  A phrase-based policy based on the latest recommendations of NIST, which encourages human-friendly passwords that are still hard to crack.
• OWASP 2017
  A strict policy that favors complex passwords that are hard to crack but also harder for people to remember.

Yes. We have a secure Windows desktop application that can be installed manually or deployed through an MSI package.

Currently, the screening questionnaires are offered in English, French (Canada), and Spanish (US). Support for other languages can be offered if required.

Now that implementation is complete, here’s how we will continue to support you moving forward. We have built a dedicated support portal for you to leverage a library of support resources, submit support tickets, and track the progress of your support requests.

• Getting Started:

• • • Visit http://ppasupport.go-evo.com to Sign up/Log in and gain access to the portal.
  • Signing Up: 
    • Click “Login” in the upper right-hand corner and then the “Sign up with us” button. You’ll be asked to provide your name and email address after which you’ll receive an activation email.
  • Logging In: 
    • You can use your email address and password or select from a Single Sign-On option through Google, Facebook or Twitter.

• How does it work?:

• • Search Bar: Conveniently located at the top of the page for you to quickly search from existing articles to find answers to commonly asked questions
  • Knowledge Base: Everything you need to know about the Personal Protective App is now available for you to easily discover
  • Submit a Ticket: If you can’t find what you’re looking for, we encourage you to submit a ticket which will be addressed by our Customer Success team
• My Tickets: Follow the progress of your submitted tickets as our Customer Success team works on your request