MedAssistantSecurity and privacy
Where your data is, how it's protected, and best practices for your team.
Your patients' data stays in Canada, encrypted and under your control. This page summarizes the measures in place and what you can do on your end. The official commitments are in the privacy policy and on the Security and compliance page.
Measures in place
- Hosting in Canada, in certified data centres.
- Encryption of all data, in transit and at rest (AES-256).
- Controlled access: each role only sees what it needs. Managers and assistants don't have access to clinical reports; a recording's transcript is only visible to the person who made it.
- Logging of access to and changes to patient data.
- Limited retention: data is deleted automatically based on the periods your organization chooses, and audio is never kept for more than 48 hours. See Data retention.
- Artificial intelligence: the providers we use don't use your data to train their models.
- Certification: MedAssistant is certified under Santé Québec's Trousse globale de vérification (TGV).
Best practices
Turn on two-factor authentication in Settings › Security. See Account settings.
Get the patient's consent before recording a conversation with them, and indicate it with Consent obtained.
Copy into your EMR what you need to keep: MedAssistant deletes data when its retention period ends.
Give everyone the right role: reserve the Manager role for the people who handle billing, and promptly remove access for anyone who leaves the team. Access hours limit the Professional view to working hours. See Users.
Protect your devices: lock your workstation when you step away, sign out of a shared computer, and reserve the waiting room tablet for the Tablet role.
Delete your account
You can request the deletion of your account and your data on the Delete my account page. The request is processed manually, within 5 to 30 business days. Some data, such as billing, is kept for as long as the law requires.
Report a problem
Suspect unauthorized access or a security incident? Write to us right away at [email protected] or call 514 688-4394.