Built to the standard regulated health data demands
Structura is designed from the ground up for the privacy, security, and audit expectations that apply to Canadian clinics handling personal health information.
Controls appropriate to regulated health information
Canadian data residency — on the roadmap
Canadian data residency is a roadmap milestone appropriate to PHIPA and provincial requirements — not yet current infrastructure. We will publish progress as it advances.
Role-based access control
Granular permissions ensure staff only see what their role requires — a core control for regulated health data.
Full audit trail
Every view, edit, and acknowledgement is logged. That log is what a college inspector asks to see first.
PHIPA & PIPEDA alignment
Workflows, policies, and evidence map to Canadian privacy law and regulatory-college standards across provinces.
SOC 2 Type II readiness
A SOC 2 Type II readiness program is on our roadmap as a trust signal for clinic administrators and insurers. We are transparent that this is a planned milestone rather than a current certification — and we'll publish progress as the program advances.
Until then, our compliance posture rests on role-based access, complete audit logging, and PHIPA/PIPEDA-aligned workflows, with Canadian data residency as the next roadmap milestone.
SOC 2 Type II
Readiness program — roadmap milestone, not a current certification.
What Structura is — and what it is not
We are deliberate about how we describe our product. These statements apply across the site, the platform, and any reports it generates.
A tool to support compliance — not a guarantee of compliance
Structura helps you track and document compliance activities. Using Structura does not guarantee, certify, or ensure compliance with PHIPA, PIPEDA, Quebec's Law 25, any professional college or regulatory standard, or any other obligation. Compliance scores, checklists and recommendations are informational aids that should be reviewed by your own qualified personnel or advisors before you rely on them.
Not legal, regulatory, or clinical advice
Structura is a software tool. It does not provide legal, regulatory, or clinical advice, and it is not a substitute for professional advice from a qualified lawyer, privacy professional, or clinician. You remain responsible for your own compliance decisions.
"Aligned" is a design approach, not a certification
Structura is built to align with PHIPA, PIPEDA, and Quebec’s Law 25 requirements. "Aligned" describes our design approach — no "PHIPA-certified," "PIPEDA-certified," or "Law 25-certified" status exists, and we do not claim one.
Roadmap features
Some capabilities described on this site are planned and may not yet be available. Features marked "roadmap" or "coming soon" are not commitments and may change. Current availability is described in your Order Form and Documentation.
Statistics and regulatory figures cited on this site are drawn from third-party and government sources for general information and may change. Structura is a pre-launch product; features and availability are confirmed in your Order Form.
Have a security or compliance question?
Our risk and GRC lead is happy to walk your administrator or privacy officer through our controls.