Book a visit
Privacy & Security

Your patients' information stays where it belongs

Our agents work inside your own systems from a secure, supervised office. Patient records never leave your systems, and every safeguard is written into your agreement.

Book a visitSee our safeguards
Your pharmacy or clinicPatient records stay here.
Encrypted connection
Encrypted connection
Our secure officeAgents on locked-down computers.
Agents work inside your system over an encrypted connection. Nothing is copied out of it.

Three things that never change

Records stay with you

Patient information stays in your pharmacy system or EMR. Agents work inside it; nothing is copied out or saved on their computers.

Admin work only

Agents prepare and process; your licensed staff make every clinical decision.

Written into your agreement

Every safeguard on this page is part of the signed privacy agreement, not just a promise on a website.

Layer by layer

Our safeguards

People

  • Criminal record check before any access
  • Signed confidentiality agreement and privacy training before any access
  • A supervisor on site every shift
  • Work only from our secure office - never from home

Computers

  • Full-disk encryption
  • USB ports and printing turned off
  • No admin rights for agents
  • Nothing saved on the computer

Access

  • A private encrypted connection that only reaches your system, only from approved computers
  • Multi-factor sign-in every time
  • A named login for each agent in your system
  • Access to only the information each task needs

Oversight

  • Calls recorded and screens monitored for quality and security
  • Recordings stored securely and deleted after 30 days
  • Access removed the same day an agent stops working on your account

Agents never

Some things are off the table, every day, for every agent.

  • Copy, download, print or save patient information outside your systems
  • Use patient information for anything other than your work
  • Work from home or anywhere outside our secure office
  • Make any clinical decision or give medical advice
Incident response

You hear from us within 24 hours

If we ever suspect a privacy breach involving your patients, we contain it, notify you within 24 hours and work through it with you, following our written incident response plan.

  1. Step 1Contain
  2. Step 2Notify you within 24 hours
  3. Step 3Resolve together
Your agreement

Everything in writing before day one

  • A signed privacy agreement - the one your jurisdiction requires, in Canada or the US
  • A service agreement that sets out exactly what your agents do
  • A clear list of tasks agents never perform

If you ever leave, your data leaves with you

  1. 1Access switched off within 1 business day
  2. 2Any remaining data deleted within 30 days
  3. Written confirmation that it's done

Questions owners ask

No. Records stay in your pharmacy system or EMR. Agents view and work in it over an encrypted connection, and nothing is saved on their computers.

Have a privacy question before you decide?

Book a short visit or call. We'll walk you through every safeguard and answer your questions in person.

Book a visit
+1 613-981-3184hello@medorca.ca