In-Country Data Residency
All data stays within Canada in AWS Canada Central with zero cross-border transfer, meeting provincial privacy commission standards.
🇨🇦 Healthcare Privacy & Compliance
PIPEDA & Provincial Trust Center
Strict data sovereignty, in-country AWS Canada Central infrastructure, and certified human-governed workflows for modern medical practices.
Data Sovereignty
100% In-Country Cloud Infrastructure
All clinical notes, audio processing, and database records reside exclusively in AWS Canada Central (Montreal/Calgary). No PHI ever crosses international borders.
Provincial Alignment
PIPEDA, PHIPA, HIA & PIPA
Fully compliant with federal privacy legislation and provincial health privacy laws across Ontario, Alberta, British Columbia, and Quebec.
Legal Framework
Information Manager Agreements
We execute standard Information Manager Agreements (IMAs) and Data Processing Agreements (DPAs) with every clinic partner.
Security & Privacy Architecture
At Anot Health, patient privacy is non-negotiable. We understand the stringent regulatory expectations of Medical Regulatory Authorities (Colleges of Physicians and Surgeons), Provincial Privacy Commissioners, and health privacy statutes. Our entire technology stack is engineered from the ground up for strict data sovereignty.
PIPEDA & Provincial Laws
Compliant with PIPEDA (Federal), PHIPA (Ontario), HIA (Alberta), PIPA (BC), and Quebec Law 25.
In-Country Cloud Residency
Hosted in AWS Canada Central. Encrypted with AES-256 at rest and TLS 1.3 in transit.
SOC 2 Type II
Our controls are independently audited for security, availability, and confidentiality. The report covers the whole platform and is available to clinics on request.
1. Provincial Privacy Frameworks Covered
Anot Health adheres to all relevant Canadian health information privacy acts:
- Federal PIPEDA: Personal Information Protection and Electronic Documents Act compliance across all interprovincial workflows.
- Ontario PHIPA: Personal Health Information Protection Act requirements for Health Information Custodians (HICs) and service agents.
- Alberta HIA: Health Information Act compliance for Alberta custodians, clinics, and Primary Care Networks (PCNs).
- British Columbia PIPA: Personal Information Protection Act standards for private clinics and health organizations.
- Quebec Law 25: Modernized protection of personal information and stringent privacy governance.
2. Information Manager Agreements (IMA)
Before launching with any medical practice, Anot Health executes an Information Manager Agreement (IMA) or Business Associate / Data Processing Agreement (DPA) tailored to your province. This formal contract establishes our legal duties as an Information Manager under provincial statutes, ensuring patient data confidentiality and security accountability.
3. Strict In-Country Data Residency
Unlike US-centric AI scribes that route patient audio and chart transcripts to US servers, Anot Health operates dedicated instances inside AWS Canada Central. Patient conversations and clinical records are processed and stored strictly within Canadian territory, fully honoring public healthcare data residency mandates.
4. Zero AI Training on Patient Health Information (PHI)
Your patients' conversations and clinical charts are never used to train public language models or commercial AI datasets. Our speech engine operates within isolated, Canadian-hosted environments. Once notes are verified and successfully signed into your clinic EMR (Accuro, Telus PS Suite, Med Access, OSCAR), encounter audio is purged according to your practice's data retention policy.
5. Two-Stage Human QA Firewall
Pure AI transcription models frequently introduce dangerous hallucinations in dosage units, lateralities, and diagnoses. Anot Health protects clinicians with a certified human QA review layer: a trained medical scribe drafts the note, and a Quality, Performance & Safety (QPS) auditor validates every clinical detail before chart delivery.
6. Compliance & Diligence Inquiries
Need our Compliance Package, Privacy Impact Assessment (PIA) assistance, or Threat Risk Assessment (TRA) documentation for your clinic or Health Authority? We can also provide our SOC 2 Type II report, which covers the platform your data runs on. Contact our dedicated privacy team at admin@anot.health and we will arrange access, under NDA where required.
What clinic leadership evaluates first
Practical safeguards for medical directors, clinic managers, and privacy officers reviewing clinical workflow technology.
Provincial IMA Execution
Formal Information Manager Agreements (IMAs) aligned with PHIPA, HIA, and PIPA executed before clinic onboarding.
EMR API Isolation
Secure, audited integration with Accuro, Telus Health (PS Suite, Med Access), OSCAR Pro, and Epic.
Human Verification Layer
Certified scribes and QPS auditors verify dosages and diagnoses, preventing AI hallucinations from ever entering the patient chart.
Frequently Asked Compliance Questions
Common diligence questions from physicians and clinic administrators.
Is patient data stored in Canada?+
Yes, 100%. All processing, speech transcription, database storage, and backup systems operate strictly within AWS Canada Central (Montreal/Calgary). No data leaves Canada at any point in the workflow.
Does Anot Health sign an Information Manager Agreement (IMA)?+
Yes. We execute an Information Manager Agreement (IMA) compliant with provincial legislation (e.g. Ontario PHIPA, Alberta HIA, BC PIPA) with every clinic and provider prior to go-live.
Are audio recordings used to train public AI models?+
Never. Patient audio and clinical text are processed inside private cloud instances and are strictly segregated. Audio is never used to train third-party public models.
How does this integrate with clinic EMRs like Accuro or Telus?+
Our scribes and platform deliver verified notes directly into your favorite EMR templates inside Accuro, Telus PS Suite, Med Access, or OSCAR Pro. Physicians review and sign with the fastest turnaround time.
Need a Privacy & Compliance Diligence Package?
We will provide our Information Manager Agreement (IMA), PIA documentation, and security architecture breakdown for your clinic leadership.