"The EMR is slow every morning"
Front-desk staff wait on screens while the waiting room fills up. The cause is usually an ageing workstation, a struggling server or a congested network, and each of those can be measured and fixed.
Your EMR has to be up when the first patient walks in, and patient records have to stay private. We look after the computers, network, accounts and backups behind both, for clinics in London, Windsor, Sarnia, St. Thomas and Woodstock.
Front-desk staff wait on screens while the waiting room fills up. The cause is usually an ageing workstation, a struggling server or a congested network, and each of those can be measured and fixed.
Shared accounts are fast at the front desk but make it impossible to tell who opened which chart. Individual sign-ins with quick switching keep the speed and give you a record.
Most clinics have a backup job. Far fewer have restored from it. Until a restore has been tested, nobody knows whether last month's charts would come back.
Ontario's Personal Health Information Protection Act (PHIPA) makes your clinic, as the health information custodian, responsible for protecting patient information. Much of that protection is technical. Here is how each obligation maps to the work we do.
| Your responsibility under PHIPA | What CVN puts in place |
|---|---|
| Protect health information against theft, loss and unauthorized use, copying, change or disposal | Individual accounts with multi-factor sign-in, encrypted laptops, endpoint detection and response on every device, email filtering, and prompt security patching |
| Limit access to the people who need it for their role | Role-based permissions on files and shared drives, same-day account removal when staff leave, and a regular review of who can open what |
| Notify patients, and the Information and Privacy Commissioner where required, when information is stolen, lost or accessed without authority | A written incident plan, plus a timeline of what happened, which records were involved and what was done about it, so you can decide what notice you owe |
| Stay responsible for your agents, including the IT provider who can reach your systems | A written confidentiality agreement at onboarding, named technicians, and logged remote sessions |
| Keep records available when a patient or clinician needs them | Encrypted, versioned backups that we monitor and test-restore, and a recovery plan with an agreed target for how long you can be down |
This is a practical summary, not legal advice. Your privacy officer is responsible for your clinic's PHIPA program, and the Information and Privacy Commissioner of Ontario publishes guidance for custodians. We handle the technology side and document it so your privacy officer has something concrete to work from.
We don't replace your EMR vendor. We know TELUS PS Suite, Accuro and Practice Perfect, we look after everything they depend on, and we deal with the vendor's support team for you when a problem turns out to be on their side.
Most breaches start with an email. We run short awareness training and simulated phishing tests for your staff, so a fake "lab results" email gets reported instead of clicked. You get a simple report of who needs a refresher.
We publish our prices, which most IT providers in the region don't. Rates are in Canadian dollars, billed monthly, plus tax.
Unlimited remote helpdesk, 24/7 monitoring, patching, managed antivirus and a password manager. Suits a small practice with a cloud-hosted EMR.
Everything in Essential, plus unlimited on-site support, the full security suite with email protection, cloud backup and disaster recovery, and priority emergency response.
For multi-site clinics and family health teams. Adds VoIP, hosting, a technology roadmap and controls planned around your privacy program.
We're based at 615 Commissioners Rd E in London. Remote support covers every clinic we look after. On-site visits cover London, St. Thomas, Woodstock, Sarnia and Windsor, plus the towns in between.
We'll ask how your clinic handles accounts, devices and backups, and tell you the two or three things worth fixing first. No obligation, and no sales pitch on the call.