08Drawer 08, Trust & privacy
Card 7 of 10
Security reviews and privacy assessments
The question: Can you help with our privacy impact assessment?
We don't publish certifications, approvals or audit status on the site. For your clinic's privacy impact assessment or a security questionnaire, the team provides what you need under the subscriber agreement; I can open a ticket for you. Meanwhile: records are stored in Canada, encrypted, and changes, exports and refusals are kept with who and when.
Your privacy impact assessment
The clinic prepares and submits any PIA its custodians need. On request, Arxeon provides documentation about the service's safeguards to support it.
Security questionnaires
Once a year (or after an incident), a clinic can ask for a summary of the security and privacy controls and answers to a reasonable security questionnaire.
What the site does say
- Records and backups stored in Canada, encrypted on the way and at rest.
- Five roles; a visit's notes are closed to the front desk and billing.
- Changes, exports and refusals kept with who and when.
- Two-step sign-in for anyone who turns it on.
Ask the team
I can open a ticket for your assessment or questionnaire.
Where to look