Built to protect data: and speed procurement
TSB is PHI-minimal by design: name, email and phone only. Encryption in transit, data residency in Canada and a record of health-region privacy and security reviews since 2018 help your privacy and IT teams say yes faster.
Privacy-first, by architecture
Security isn't a setting bolted on afterward: it's how the platform is built.
PHI-minimal by design
Name, email and phone only. No health numbers, requisitions, results or diagnoses.
Encrypted in transit
TLS on every connection, hashed credentials and strict access controls.
In-region data residency
Data residency in Canada, to support BC health region requirements under FOIPPA and other provincial requirements. U.S. hosting available on request for U.S. customers.
Aggregate-only analytics
No patient names and no staff surveillance: insights measure flow, not people.
Role-based access
People see only what their role needs, with login and activity logging.
PIA & security review support
Privacy Impact Assessment and Security Threat and Risk Assessment processes supported at BC health regions since 2018.
Certified infrastructure. Slot IQ runs on DigitalOcean, whose platform is independently audited to SOC 2 Type II and SOC 3 Type II (Schellman & Company) and holds CSA STAR Level 1. Our Canadian hosting is in DigitalOcean’s Toronto region, a data centre certified to SOC 1 Type II, SOC 2 Type II and ISO/IEC 27001. TSB Healthcare’s own application and operational controls are reviewed through health-region Privacy Impact Assessment and STRA processes and an independent OWASP-based penetration test by Websec (Victoria, BC) in November 2024.
Reviewed by the people who have to say yes
What the platform has been through, with dates. We publish what we can evidence and nothing more.
In production since 2018
Live with BC public health regions since 2018, across 70 outpatient sites.
PIA & STRA processes since 2018
Privacy Impact Assessment and Security Threat and Risk Assessment processes supported at four BC health regions.
Privacy schedule executed, 2020
A Provincial Health Services Authority privacy protection schedule executed under contract.
Penetration tested, 2024
Independent grey-box penetration test of the patient and staff portals by Websec (Victoria, BC), November 2024, under an NRC IRAP cybersecurity mandate, following the OWASP Web Security Testing Guide. No critical or high-severity findings. Summary available to health authority privacy and security teams on request.
No known privacy breach involving the platform since launch. TSB Healthcare is designed to support HIPAA, PIPEDA and FOIPPA.
Fewer blockers between you and go-live
Because Slot IQ is PHI-minimal and hosted in Canada, the questions that usually stall healthcare deals have answers ready.
- PHI-minimal architecture reduces breach surface and review scope.
- Data residency in Canada for BC health region requirements under FOIPPA and other provincial requirements.
- Secure connection with your LIS and EMR, least-privilege by default.
- Documentation ready for PIA, security questionnaires and procurement.
Built for the standards you answer to
Privacy and security aren’t bolted on: they’re how the platform is architected, so IT and privacy teams can say yes faster.
TSB Healthcare is designed to support HIPAA, PIPEDA and FOIPPA, with data residency in Canada. Infrastructure certifications are held by our hosting provider, DigitalOcean; TSB’s own controls are reviewed through health-region PIA and STRA processes and an independent penetration test. See security & compliance
FAQs
Does TSB store protected health information (PHI)?
Is TSB Healthcare HIPAA compliant?
Is TSB Healthcare SOC 2 certified?
Where is our data stored?
Can you support a Privacy Impact Assessment (PIA)?
Has the platform been independently tested?
Has there been a privacy breach?
Do you track staff or patients?
Bring your privacy team
We'll walk your IT and privacy stakeholders through the architecture and answer the security questionnaire: book a 30-minute session.
and more…