Security & compliance
You hold the duty. NousTalk holds the controls.
Built for the privacy obligations of healthcare. Data is encrypted in transit and at rest, access is limited by role, and every record touched is logged. Built for HIPAA, PHIPA, PIPEDA, GDPR & Loi 25 — with BAAs available for HIPAA-covered practices.
NousTalk — Security & compliance
All systems secure
Encryption
In transit & at rest
Compliance
HIPAA, PHIPA, PIPEDA, GDPR & Loi 25 ready
Authentication
Two-factor enabled
Audit logs
Full history
Security infrastructure
Security & compliance
Your client data is protected at every level — from encryption to access controls, built for the realities of healthcare.
Encryption at every layer
Data encrypted in transit via TLS and at rest with AES-256-GCM envelope encryption.
Built for HIPAA, PHIPA, PIPEDA, GDPR & Loi 25
Privacy standards across Canada, the US, and the EU.
Role-based access
Limit what each role can see and do.
Audit logs
A complete history of who accessed what, and when.
Two-factor authentication
An extra layer of security at sign-in.
Automatic backups
Encrypted, redundant, always running.
Data export
Download your data anytime — it's yours.
Data residency
Your client data stays in your country — Canadian practices in Canada, US practices in the US.
Ready to SecureYour Practice?
For mental health practices that need privacy controls aligned with HIPAA, PHIPA, and Loi 25. For mental health practices that take the duty of confidentiality seriously — and need an environment that does the same.
Book a Demo