A contact form can become a confidentiality incident.
Health information is the most sensitive category under Law 25. A poorly designed booking flow, a form that asks for too much, and you are holding data you never intended to collect.
The problems that keep coming up in your sector
Not a generic list. These are the situations we actually run into with our clients in this sector.
The form collects more than necessary
A « describe your problem » field on a contact page, and you receive health information by unencrypted email, with no record and no retention period. It is the most widespread mistake in clinics.
Online booking without proper safeguards
Consumer booking tools often host data abroad and keep far more than necessary. Convenient for the patient, hard to justify to the CAI.
Proving compliance, not just claiming it
Records of processing, categorization of the information held, privacy impact assessments. In health care, these are documents you will be asked for, not good intentions.
What really matters for you.
We offer about twenty services. Here are the four that change the most in your sector, and why.
Discuss your situationLaw 25 Compliance and Catégo
Catégo is built in part for health and social services organizations: records of processing, DICT categorization and assisted PIAs, exportable for your files and for the CAI.
Learn moreManaged Hosting in Quebec
Servers in a data centre in Quebec, with backups and monitoring. A clear answer to the question « where is our data », which always comes up.
Learn moreCustom Forms and Portals
Collect strictly what is needed, encrypt what must be, set a retention period and log access. A form designed for health care, not retrofitted afterwards.
Learn moreBusiness Email Hosted in Montreal
Exchanges involving a patient stay on servers in Quebec, with antispam and encryption in transit.
Learn moreWhich compliance plan for your sector?
Health information and heightened obligations: weekly rescans, change notifications and the SLA justify themselves.
Our recommendation : Moelleux Entreprise
90$/année per site. Covers Law 25, PIPEDA, CCPA and GDPR, with an SLA.
Often already included
Moelleux Essentiel is included from the Silver hosting plan on, and Moelleux Professionnel with the E-Commerce plans.
Not sure about your obligations?
The answer depends on where your visitors and clients are, not on your address. Write to us, it is a quick question to settle.
The services that often come along often come along
Depending on the size and maturity of your organization, these services round out the picture.
Moelleux
Consent banner and generated privacy policy, the minimum foundation before any collection.
See the serviceSecurity Audits
In health care, a confidentiality incident is reported to the CAI. Preventive analysis costs far less.
See the serviceDKIM and DMARC Monitoring
Prevents spoofing of your domain, a real risk when your communications involve patients.
See the serviceSecure File Transfer
Sending a document to a patient or a colleague without resorting to a plain attachment.
See the serviceShield and Access Logs
Web application firewall and detailed logs, useful for demonstrating diligence after the fact.
See the serviceAre you an IT firm or agency serving clinics?
Hosting in Quebec, compliance and secure transfer under your brand, for a portfolio of clinics.
Partner programFrequently asked questions : Health and clinics
We already know your constraints.
A team in Quebec, servers in Canada, and verifiable references in your sector. Write to us and we will tell you plainly what applies to you.
Reply within 24 business hours. Support in French.