Data residency
Clinic data, including personal health information, is stored and processed in Canada on Oracle Cloud Infrastructure in the Toronto region. Website and form-related information processed by Cloudflare may be processed outside Canada.
Security & privacy
Privacy isn’t the fine print.
Designed to help you meet your privacy obligations. Clinic records are stored and processed in Canada. Available across Canada, except Quebec.
Where records live
Canadian storage. Separate clinics.
Your clinic’s records stay separate
Each clinic’s data is kept separate from every other clinic’s data. This separation is enforced for individual records in the database.
Who can see records
Access with care.
Access control & sign-in
Staff password logins require multi-factor authentication. Role-based permissions let clinics limit what each staff member can see and do. Contact details are masked on the server for staff without permission to see them.
Encryption
Information is encrypted in transit. No method of transmission or storage is completely secure. Clinics remain responsible for managing user access and authentication practices.
A dependable record
A history that stays intact.
Audit logs of chart and profile reads
Staff reads of charts and client profiles are logged. If the audit record cannot be written, the read is blocked. Clinics remain responsible for their own record-retention duties under applicable laws and professional standards.
Signed means read-only
Once a clinical note is signed, it is read-only. Corrections are added as addenda, so the original stays intact. For a short window set by the clinic, the author can reopen their own note. The signed version is kept and the change is recorded in the audit log.
Planning for continuity
Backups and a way to export.
Backups
Encrypted backups stored in Canada.
Your data & export
After a subscription ends, the clinic’s account owner may request clinic data in CSV and PDF formats for 90 days. We provide reasonable assistance so the clinic can retrieve records needed for its legal and professional duties.
Clear points of contact
Report a concern. Read the policies.
Responsible disclosure
If you notice a possible security issue, email hello@clinictimeos.com. Describe what you found and how to reproduce it. Please leave patient information out of the report.
Policies
Read our Privacy Policy and Terms of Service, effective October 17, 2026, for our privacy practices, subscription terms and clinic responsibilities.