Security

Patient trust, engineered in.

Clinics hand us their most sensitive conversations. This page explains, in plain language, how Clinician 360 handles calls, and patient details.

No call recordings

Calls are never recorded. We keep a written transcript of each call, plus patients' texts, names, and phone numbers, encrypted in transit (TLS) and at rest.

Encryption

All data moving between Clinician 360, your EHR, and your team is encrypted in transit. Stored patient data is encrypted at rest.

Data residency

Our database is in Canada. Some of the AI and phone services we use process conversations in the United States. If your province has specific residency requirements, talk to us before onboarding.

Team access

Only people your clinic invites can sign in, with two-step verification. Everyone on your team sees all of your clinic's conversations — there are no per-role limits yet.

Retention and deletion

Your clinic owns its data. Transcripts, texts, names, and phone numbers are kept for up to 2 years, and you can request deletion of your clinic's data at any time.

Privacy-law alignment

Clinician 360 is designed to support clinics subject to PIPEDA and provincial health-privacy laws such as PHIPA. We can walk your team through how the system maps to your obligations.

Report a vulnerability

If you believe you've found a security issue, email us at team@clinician360.ca. We review every report and respond within two business days.