Request a privacy package

The privacy package is the vendor-side documentation a custodian needs in order to complete a privacy impact assessment and to assess Arcona before contracting. It is provided on request, at no cost, and without a prior call.

Contents

• The information management agreement for your province, populated and ready for signature. Alberta’s is drafted to the Health Information Act s. 66 and Health Information Regulation s. 7.2.
• A data flow description: how a laboratory report enters the system, what is done with it, and when the source document is deleted.
• A complete field inventory, and an explicit statement of what is not stored.
• Every subprocessor with its hosting region, including that Supabase operates on AWS in Montréal.
• Authentication, encryption in transit and at rest, audit logging, retention and destruction, break-glass support access, and the breach notification timeline committed to in the agreement.
• The access and correction request procedure required by Health Information Regulation s. 7.2.
• The vendor’s continuity position: what happens to a custodian’s data if Arcona Inc. ceases to operate, and the mechanism by which it is retrieved.
• A statement of residual identification risk, and the matters the vendor does not claim.

Request the package

Leave this field empty

Your name (required)

Work email (required) The package is sent to this address.

Clinic or practice (required)

Province (required) Choose one Alberta British Columbia Manitoba New Brunswick Newfoundland and Labrador Nova Scotia Ontario Prince Edward Island Saskatchewan Northwest Territories Nunavut Yukon The agreement differs by province. This determines which is sent.

Your role Prefer not to say Physician or clinic owner Clinic or practice manager Privacy consultant or advisor Legal counsel IT Other

Anything specific you need answered

Request the package

Information submitted through this form is used to respond to the request. It is not used for marketing and is not disclosed to any third party. Section 3 of the privacy policy describes this form and its processor.