Privacy and security for Canadian clinicians

Data protection

• Patient data stored by Threvix is hosted in Canada.
• Data is encrypted in transit and at rest.
• Access to patient data is limited to authorized personnel and systems and is logged.

Your role and ours

You remain responsible for the patient information you submit to Threvix. Threvix processes that information as necessary to provide the services you request.

You are responsible for obtaining any consent or other authority required for your use of Threvix in your clinical practice.

Clinical data

• Audio submitted for transcription is not retained after processing is complete.
• Clinical notes and records are retained according to your settings and applicable legal requirements.
• Other stored information is retained only for as long as reasonably necessary to provide the services and meet applicable legal requirements.

AI outputs

Notes, summaries and suggestions generated by Threvix are drafts and must be reviewed and approved by a clinician before being relied on or incorporated into the patient record.

Threvix does not make clinical decisions. The clinician remains responsible for the content of the record and for clinical care.

Privacy and compliance

Threvix maintains privacy practices designed to support applicable Canadian and Quebec privacy requirements, including PIPEDA and Quebec privacy law.

Privacy impact assessments are conducted where required by applicable law. Where personal information is processed or communicated outside Quebec or Canada, Threvix applies the required assessments and safeguards.

Service providers that handle personal information on our behalf are subject to appropriate privacy, confidentiality, and security obligations.

Confidentiality incidents

Threvix maintains an incident response process. Where an incident involves personal information, affected customers are notified, and reports are made to the relevant authority where the law requires it.

Individual rights

Patients may request access to or correction of their information through their clinic. Threvix supports customers in responding to those requests.

What we don’t do

• No sale of patient data.
• No use of patient data to train AI models.
• No use of patient data for advertising.
• No third-party trackers or session replay on the clinical platform.

Security reviews

Additional privacy and security documentation may be available to clinicians and practices conducting procurement or IT review.

Questions?

Threvix’s Privacy Officer can be reached at privacy@threvix.com.