Security & Compliance
Built with privacy-first architecture and comprehensive compliance frameworks to meet the stringent requirements of healthcare organizations across British Columbia.
Our comprehensive security approach ensures your patient data and operational information remain protected while meeting all regulatory requirements
LOB is designed to minimize Personal Health Information (PHI) collection and storage. Our architecture focuses on scheduling data while integrating seamlessly with existing EMR systems that maintain comprehensive patient records.
All data is stored exclusively on Canadian servers in compliance with provincial and federal data residency requirements. Our infrastructure partners maintain SOC 2 Type II certification and meet BC healthcare hosting standards.
End-to-end encryption for data in transit (TLS 1.3) and at rest (AES-256). Role-based access controls (RBAC) ensure users only access data necessary for their function, with multi-factor authentication available.
Comprehensive audit logging tracks all system access and data modifications. Logs are tamper-proof, retained according to regulatory requirements, and available for compliance reviews and security investigations.
LOB meets BC healthcare procurement standards including security questionnaires, vulnerability assessments, and third-party audits. Documentation packages are available to streamline your procurement process.
Full compliance with BC FIPPA, PIPA, and federal privacy legislation. Our privacy framework includes data minimization, retention policies, breach notification procedures, and regular privacy impact assessments.
LabOnlineBooking™ adheres to all relevant healthcare privacy and security regulations
Full compliance with British Columbia's Freedom of Information and Protection of Privacy Act, ensuring public sector health authorities meet their privacy obligations.
Adherence to Personal Information Protection Act for private sector healthcare organizations operating in British Columbia.
Designed to support Personal Health Information Protection Act requirements for healthcare providers across Canada.
Compliance with federal privacy legislation including PIPEDA where applicable to healthcare operations.
