Home / Healthcare
IT and security for clinics and hospitals, built around patient privacy.
Health information custodians carry legal duties to protect personal health information, and patients notice when the EMR is down. We run your technology so the clinic keeps moving and your privacy obligations are met.
What healthcare clients rely on us for
EMR uptime
We support the network, devices and integrations around your EMR, and work directly with your EMR vendor when something breaks.
PHIPA safeguards
Administrative, technical and physical safeguards for personal health information, documented and kept current.
Access control
Role-based access, multi-factor sign-in and fast removal of departing staff and locums.
Secure communication
Encrypted email, secure fax-to-email and safe patient messaging set up properly.
Backup and continuity
Backups of patient data with tested restores, and a plan for running the clinic during an outage.
Breach readiness
A response plan that covers containment, investigation and notification duties to patients and the privacy commissioner.
Privacy and security training
Short, practical training for physicians, nurses and front-desk staff, with records for your files.
Medical device networks
Imaging and other connected devices separated from the office network to limit what an attacker can reach.
A readiness assessment for health information custodians
Our healthcare assessment reviews your practice against PHIPA's safeguarding requirements, the CIS Controls and the expectations of your EMR and hospital partners. You get a clear list of what to fix and the policies and records you need to show you are meeting your obligations.
- Privacy and security policy review, with templates where you have gaps
- Access review of your EMR and email accounts
- Device encryption and patching check across every workstation and laptop
- Backup and restore test of patient data
- Review of agent and vendor agreements that involve personal health information
Outside Ontario? We also assess against other provincial health privacy laws, such as Alberta's Health Information Act and Manitoba's Personal Health Information Act.
Common questions
Do you work with our EMR vendor?
Yes. We coordinate with your EMR vendor on networking, integrations, upgrades and troubleshooting so your staff don't have to.
We're a small clinic. Is this overkill?
No. Small clinics are frequent targets because attackers expect weaker defences. Our plans are sized to the number of staff and workstations you have.
Can you help after a privacy breach?
Yes. We help contain the incident, determine what information was involved and prepare the facts you need for notifications. We work alongside your legal counsel and privacy officer.
Do you support hospitals?
Yes, typically alongside internal IT and privacy teams, with security assessments, program delivery and co-managed monitoring.
Book a healthcare readiness assessment.
Find out how your clinic measures up against PHIPA safeguards and what to fix first.