Built to protect data — and speed procurement
TSB is PHI-minimal by design: name, email and phone only. Encryption in transit, in-region hosting options and a record of health-authority privacy and security reviews since 2018 help your privacy and IT teams say yes faster.
Trusted across 69 BC labs · 3.89M+ visits · 816K+ patient references (as of 10 Sep 2026)
Privacy-first, by architecture
Security isn't a setting bolted on afterward — it's how the platform is built.
PHI-minimal by design
Name, email and phone only. No health numbers, requisitions, results or diagnoses.
Encrypted in transit
TLS on every connection, hashed credentials and strict access controls.
In-region data residency
Canadian and U.S. hosting options, confirmed in writing per deployment, to support BC health authority requirements under FIPPA and other provincial requirements.
Aggregate-only analytics
No patient names and no staff surveillance — insights measure flow, not people.
Role-based access
People see only what their role needs, with login and activity logging.
PIA & security review support
Privacy Impact Assessment and Security Threat and Risk Assessment processes supported at BC health authorities since 2018.
Reviewed by the people who have to say yes
What the platform has been through, with dates. We publish what we can evidence and nothing more.
In production since 2018
Live with BC public health authorities since 2018, across 69 active labs.
PIA & STRA processes since 2018
Privacy Impact Assessment and Security Threat and Risk Assessment processes supported at four BC health authorities.
Privacy schedule executed, 2020
A Provincial Health Services Authority privacy protection schedule executed under contract.
Penetration tested, 2024
Independent third-party penetration test completed under a National Research Council IRAP cyber-resilience mandate.
No known privacy breach involving the platform since launch. TSB HealthCare is designed to support HIPAA, PIPEDA and FIPPA.
Fewer blockers between you and go-live
Because the flow layer is PHI-minimal and hosting is in-region, the questions that usually stall healthcare deals have answers ready.
- PHI-minimal architecture reduces breach surface and review scope.
- Data residency in Canada or the United States for BC health authority requirements under FIPPA and other provincial requirements.
- Secure integration with your LIS and EMR, least-privilege by default.
- Documentation ready for PIA, security questionnaires and procurement.
Built for the standards you answer to
Privacy and security aren’t bolted on — they’re how the platform is architected, so IT and privacy teams can say yes faster.
TSB HealthCare is designed to support HIPAA, PIPEDA and FIPPA. Data-residency options are confirmed per deployment. See security & compliance
Frequently asked questions
Does TSB store protected health information (PHI)?
Is TSB HealthCare HIPAA compliant?
Where is our data stored?
Can you support a Privacy Impact Assessment (PIA)?
Has the platform been independently tested?
Has there been a privacy breach?
Do you track staff or patients?
Bring your privacy team
We'll walk your IT and privacy stakeholders through the architecture and answer the security questionnaire — book a 30-minute session.
and more…