Privacy

Our privacy posture follows from one architectural principle: minimize PHI.

PHI minimization

We store no patient names, health-card numbers or contact info — only FHIR references. The EHR remains the source of truth.

Audit trail

Every action is logged append-only: who, what, when. Logs contain no PHI.

Data residency

Sensitive data is hosted on Canadian soil.

Data subject rights

Access, rectification and deletion are supported under Law 25.

Validation

Full Law 25 compliance is validated at implementation with your legal team.

Contact us

For any privacy question or to exercise your rights, reach us through the contact form. Responsible entity: 9566-3399 Québec inc. (NEQ 1182092180).