Skip to content

Security and compliance

Your data and your patients' data stay in Canada, encrypted, and under your control.

Technical measures

End-to-end encryption

All data is encrypted with AES-256, in transit and at rest.

Canadian servers

Your data is hosted in Canada, in certified data centres with full redundancy.

Controlled access

Multi-factor authentication and granular access controls for sensitive information.

Audit and traceability

Every access to and change of patient data is logged.

Certifications and compliance

TGV certified

Full assessment kit, Santé Québec

Meets Santé Québec requirements for security, privacy, performance and technology.

View the certificate

Law 25 and Law 5

Quebec

Compliant with Quebec laws on the protection of personal information.

PIPEDA

Canada

Compliant with the Personal Information Protection and Electronic Documents Act.

HIPAA

United States

Compliant with United States standards for health data protection.

Privacy principles

  • Minimization of collected data
  • Explicit patient consent
  • Right to data erasure
  • Medical data portability
  • Security incident notification
  • Privacy impact assessment

Your data, your control

You can request the complete deletion of your account and data at any time. Requests are processed manually to guarantee security and compliance.

Delete my account

No security incident since our founding

Our systems are monitored continuously by cybersecurity experts.

Try MedAssistant in your practice

One month free, no credit card required.