Vero is used by clinicians who handle personal health information. For Ontario-based clinicians and organizations, that means workflows may need to align with the Personal Health Information Protection Act (PHIPA).
This article summarizes Vero's privacy and security controls for Ontario healthcare settings.
How Vero supports PHIPA-aligned workflows
Vero supports healthcare documentation with regional storage of primary clinical data, authenticated access, encryption, and retention controls. Canadian customers’ primary clinical data is stored in Canada. Some supporting providers may operate in other jurisdictions under contractual data-protection obligations.
See Privacy & Security for the full description of these safeguards and their scope.
PHIPA roles
In typical use, the healthcare provider or clinic remains responsible for how patient information is collected, used, disclosed, retained, and documented in their clinical setting. Vero acts as a technology service provider that processes information to support the clinician's use of the platform.
Clinicians should continue to follow their organization's privacy policies, consent workflows, documentation standards, and retention requirements.
Patient data controls
Open Settings → Data retention to configure automatic encounter deletion, or use manual deletion when appropriate. Automatic retention also applies to archived encounters. See Data Management for the deletion options and their consequences.
For account deletion or privacy requests requiring identity verification, contact [email protected].
AI and patient data
Patient data is not sold or used to train, develop, or improve Vero’s proprietary AI models. Third-party providers are subject to contractual data-protection obligations. See Privacy & Security for details.
Clinicians remain responsible for reviewing and approving generated content before using it in the medical record.
SOC 2 and compliance information
Vero has completed its SOC 2 Type II examination. Visit the Vero Trust Center for current security, compliance, governance, and trust information.
Frequently asked questions
Is this a PHIPA certification?
The safeguards described here support PHIPA-aligned workflows. They do not establish a standalone PHIPA certificate or certify an organization's compliance. SOC 2 Type II is a separate examination; it is not a PHIPA certificate or a security ranking.
What is Vero's Supply Ontario qualification?
Vero Scribe is listed as a qualified vendor on Supply Ontario's AI Scribe Vendor of Record arrangement, Tender-20123. The program was developed with the Ministry of Health, Ontario Health, and OntarioMD. This qualification does not establish approval by every hospital or health authority.
How do we request institutional privacy or security materials?
Ask for a teammate in your existing support conversation to review PIA, TRA, procurement, or local approval requirements. The team can confirm the current status and which materials can be shared for your request.