Safeguarding Your Data

Last updated: August 7, 2026

BxData is fully compliant with the Personal Health Information Protection Act (PHIPA) regulations to ensure the privacy and security of patient information. PHIPA is an Ontario-based law that governs the collection, use, and disclosure of personal health information (PHI).

BxData has implemented a comprehensive set of policies, procedures, and technical safeguards to meet PHIPA's requirements. Some of the key features of BxData's PHIPA compliance include:

1. Secure data storage and transmission: BxData uses industry-standard encryption protocols to protect the confidentiality and integrity of PHI. All data is stored securely on servers that meet industry security standards.
2. User access controls: BxData implements strict user access controls to ensure that only authorized personnel have access to PHI. This includes user authentication and authorization, password policies, and user activity monitoring.
3. Audit trails: BxData maintains detailed audit trails of all PHI access and activities, which can be reviewed and audited as needed.
4. PHI disclosure controls: BxData has implemented strict controls to prevent unauthorized disclosure of PHI. This includes policies and procedures for handling PHI, as well as staff training on PHI privacy and security.
5. PHI retention and disposal: BxData follows strict policies and procedures for the retention and disposal of PHI to ensure that information is not kept longer than necessary and is disposed of securely.
6. Data residency: Your data stays in Canada, always. The server is an isolated server in a secure data center in Toronto.

If you have any questions about BxData's PHIPA compliance or data privacy and security policies, please contact the privacy officer at privacy@bxdata.app.