Review daily availability and recovery
Ask about service monitoring, maintenance, backups and restoration. A backup schedule is not the same as evidence that recovery works. Identify what your clinic will do during an outage and what information staff need to continue safely. Test that operational plan with fictional records.
Understand where information travels
Map hosting, support access, messaging, video and other subprocessors. Ask which services are actually included in the contract. For cross-border processing, assess the requirements that apply to your practice with appropriate professional advice. This website does not promise a particular patient-data residency arrangement.
Look beyond the main password
Review account recovery, multi-factor authentication where supported, role permissions and staff offboarding. Shared credentials make accountability harder. Include devices and exports in the discussion because information can leave a browser-based system through ordinary day-to-day work.
A few common questions
Does cloud software automatically meet privacy requirements?
No. Applicability, contracts, safeguards and your own operating practices all need review. See the regional privacy questions on the security guide.
Prepared for clinic owners in Canada. Updated September 16, 2026. These guides support product evaluation and do not replace professional or legal advice.