Skip to content
Trust

Your data and your patients

AtomicMD’s security, privacy and legal framework, as they are in place today.

Try it free

A question about your data? confidentialite@atomicmd.ca

The essentials

  • Hosted and processed in Montréal

    The application, its database and the AI models that transcribe and analyze your dictations run in the Montréal region.

  • Identifiers removed before text analysis

    Before a model analyzes the text of a case, the name, the health insurance number, the date of birth, the phone and social insurance numbers and the stretcher are replaced with neutral tokens.

  • No training

    Your data is not used to train AI models, by us or our providers. It is neither sold nor used for advertising.

  • You decide

    AtomicMD suggests; you check, correct and sign every item. Nothing goes into the record without your action.

  • Short retention

    Audio is deleted after 48 hours, transcriptions after 7 days, notes and documents 90 days after the visit is closed.

  • Encrypted data and two-factor authentication

    Your data is encrypted in transit and at rest, and every account requires a second authentication factor.

  • Privacy impact assessment

    It has been carried out for the solution. Its summary is provided on request.

  • Certified by Santé Québec

    AtomicMD holds TGV certification from the Santé Québec Bureau de certification.

In place today

Security

Your data is encrypted during transmission and storage. Passwords are stored in a protected form, and every account requires a second authentication factor.

Each record is tied to its physician: one account cannot open another’s records. A tamper-proof log keeps track of sensitive actions.

What is sent to the AI models

  • The dictation audio, as is, to the transcription service.
  • The photo of a document, as is, to the reading model. It is processed in memory, then deleted; only the text kept is stored.
  • The clinical text, without its direct identifiers, with the age, sex and reason for visit, which are part of the clinical context.

All of this processing takes place in the Montréal region.

The trace of each suggestion

Each call to a model leaves a trace: what was sent to it, without identifiers, and what it answered. It is used to reconstruct a suggestion and check its quality, and it is kept for 90 days. A physician designated by AtomicMD, bound by professional secrecy, can review a trace you have flagged, or a small random sample, solely for this verification. Every review is recorded in the log.

Retention and your rights

Law 25 requires keeping personal information only as long as necessary. Each piece of data carries its expiry date, and an automatic sweep deletes whatever has passed it.

48 hours
audio of dictations and encounters
7 days
transcriptions
90 days
notes, documents and clinical content, after the visit is closed
90 days
traces of the AI’s suggestions
kept
billing, for your professional and tax obligations

Backup copies stay in Montréal, and their content follows the same periods.

Listening to an encounter

It requires the patient’s consent. The application shows you the sentence to say to them, you confirm their consent in one click, and the microphone stays closed until the confirmation is recorded. The patient can refuse or withdraw consent at any time, with no effect on their care: the encounter audio is then deleted immediately.

Your rights

You can export your data at any time, without prior request, in open formats (JSON, HTML, CSV). For access, correction, deletion or a complaint, write to the person in charge of the protection of personal information, at confidentialite@atomicmd.ca : we answer no later than thirty days after the request.

The legal framework

  1. Collège des médecins du Québec

    The note remains the physician’s

    The Collège asks physicians to make sure that a note produced with an AI scribe is accurate, and to obtain the patient’s explicit consent before using an AI scribe. With AtomicMD, every note is reviewed and signed, and listening to an encounter stays closed until the patient’s consent is confirmed.1

  2. Law 25 · automated decisions

    The physician signs every suggestion

    Law 25 governs decisions based exclusively on automated processing. Every AtomicMD suggestion is checked and signed by the physician: it is not such a decision.2

  3. Santé Québec · TGV certification

    A certified solution

    The Santé Québec Bureau de certification granted AtomicMD TGV certification. It attests that the solution meets the requirements of the health and social services sector for security, protection of personal information, performance and technology.

  4. Régie de l’assurance maladie du Québec

    Registered billing agency

    RAMQ registered Technologies AtomicMD inc. as a billing agency. AtomicMD submits your billing directly to RAMQ.

Sources

  1. Collège des médecins du Québec. “Scribe et intelligence artificielle.” cmq.org
  2. Act respecting the protection of personal information in the private sector, CQLR, c. P-39.1, section 12.1. legisquebec.gouv.qc.ca

Privacy policy and terms of use

This page summarizes them; it does not replace them.

Privacy policyWhat we collect, why, where, for how long, and your rights. Terms of useThe text you accept when you sign up.

Also worth reading: Evidence, what recent research says about AI in medicine.

Try it free

A question about your data? confidentialite@atomicmd.ca