Our commitments
AtomicMD: 100% Quebec-based. The green check: active today. Amber: in preparation.
Data hosted in Quebec
Database in Montreal. No data outside the country.
Identifier minimization
Direct identifiers are removed before any analysis by the artificial intelligence. The name, health-insurance number and date of birth are never sent to the AI model.
Law 25 by design
Short retention, documented consent, physician control.
Encryption and isolation
Encrypted in transit and at rest. Each account isolated.
The physician decides
No autonomous clinical action. Nothing enters the chart without an action by the physician.
AI brain in Quebec
Inference in the Montreal region. Any other region is refused.
Voice processed in Quebec
Dictation transcription in the Montreal region.
PIA kit for clinics
In preparationPrivacy impact assessment prefilled, provided at install.
TGV (in-establishment use)
In preparationRequired for in-establishment use, not for a personal tool.
Data security
Patient data lives encrypted, hosted in Quebec, isolated per account. In transit and at rest, everything is encrypted.
Before any AI analysis, the direct identifiers (name, health-insurance number, date of birth) are removed from the text: they are never sent to the AI model. The masking is automatic and always on. Clinical values (doses, blood pressure, saturation) are never touched.
Audit logs keep the minimum: what type of analysis was shown, when, with which version. Never the content of the chart.
Privacy (Law 25)
Law 25 sets a principle: keep a personal detail only as long as necessary, then destroy or anonymize it. AtomicMD applies this principle with short windows.
Our retention windows
Audio: 48 hours. Transcripts: 7 days. Notes and billing: 90 days. These are our choices, aligned with the minimization principle of Law 25, not durations imposed by the law.
Recording an encounter: hard barrier. Without documented consent, recording is refused by the system. The default path captures only the physician's voice.
The patient keeps their rights of access and correction. The person responsible for personal information is named in the full privacy policy.
Legal framework
AtomicMD is built for compliance, not to work around it. Here is where we stand, in plain terms.
A decision-support tool
AtomicMD informs, it does not replace. The physician sees the basis of each suggestion and decides.14
A dictation, verified and signed by the physician
AtomicMD is used like a dictation: only the physician's voice is captured. The Collège des médecins requires that the physician verify and sign the note before it becomes official. That is exactly our flow.16
A suggestion, never an automated decision
A framework distinct from the medical-device one: Law 25 governs decisions made exclusively by a machine. Here the AI suggests and the physician validates. The same design choice, the physician in control, answers both frameworks.19
For in-establishment use
TGV certifies the integration of software into the systems of a Santé Québec establishment. Our file is in preparation. For a physician using AtomicMD as a personal tool, it is not required.
Frequently asked questions (security)
Where is my data hosted?
In Quebec, in Montreal.
What leaves my workstation?
To the AI analysis: clinical text without direct identifiers (the name, health-insurance number and date of birth are never sent to the model). To the database hosted in Quebec: your record, encrypted.
How long do you keep the data?
Audio 48 hours, transcripts 7 days, notes and billing 90 days. Then automatic purge.
Is it a medical device?
No. It is a support tool: the physician decides and verifies everything. See the Legal framework section.
What about TGV certification?
It is required for in-establishment use, not for a personal tool. Our file is in preparation.
Terms of use
Informative public version. The agreement accepted in the app prevails. A support tool for the physician only: verify all outputs. No autonomous diagnosis, prescription or disposition. The full text lives on the Terms of use page.