Regulatory Compliance

At Compass Pro, privacy and security are fundamental parts of the software’s design.

Compass Pro is Canadian-built dental and orthodontic practice management software for practices that manage sensitive patient information. Its privacy and security safeguards are designed to support practices in meeting applicable requirements in the regions where they operate.

Regulatory compliance remains a shared responsibility and depends on each practice’s policies, configuration, access controls, staff training, and use of the software.

That’s why Compass Pro helps ensure your dental workflows remain secure, compliant, and legally sound across all regions.

Privacy and Compliance in Canada

Compass Pro is Canadian-developed software designed to support practices in meeting applicable Canadian privacy requirements, including:

• Personal Information Protection and Electronic Documents Act (PIPEDA): Canada’s federal private-sector privacy law governing the collection, use, and disclosure of personal information in applicable commercial activities.
• Personal Health Information Protection Act (PHIPA): Ontario legislation governing the collection, use, and disclosure of personal health information by applicable organizations and individuals.

Compass Pro incorporates privacy and security safeguards such as data encryption, role-based access controls, access permissions, and audit trails. Compass Pro environments and customer data for Canadian practices are hosted in Canada.

HIPAA Support for U.S. Dental Practices

Compass Pro includes safeguards designed to support U.S. dental practices in meeting applicable requirements under the Health Insurance Portability and Accountability Act (HIPAA).

Available safeguards include:

• Administrative and Access Controls: Role-based access controls, user permissions, and account-management features.
• Infrastructure Safeguards: Secure cloud hosting, controlled access, and service-resilience measures.
• Technical Safeguards: Data encryption, multi-factor authentication, and audit trails.

HIPAA compliance depends on each practice’s policies, procedures, configuration, workforce training, and use of the software.

GDPR Support for European Dental Practices

Compass Pro includes privacy and security capabilities that may support dental practices managing personal information subject to the General Data Protection Regulation (GDPR).

Depending on the available configuration and documented workflows, these capabilities may help practices manage consent, access controls, records, and responses to applicable privacy requests.

Each organization remains responsible for determining its GDPR obligations and configuring and using Compass Pro appropriately.

Secure by Design

Privacy and security safeguards are incorporated throughout Compass Pro’s design and infrastructure:

• Role-Based Access Controls: Help practices limit access to authorized users based on assigned permissions.
• Data Encryption: Helps protect information in transit and at rest using appropriate encryption safeguards.
• Audit Trails: Record relevant user activity and system access to support monitoring and accountability.
• Canadian Data Hosting: Compass Pro environments and customer data for Canadian practices are hosted in Canada.

Supporting Your Compliance Efforts

Compliance is a shared responsibility. Compass Pro provides software capabilities, product documentation, onboarding, training, and customer support to help practices use available privacy and security safeguards appropriately:

• Onboarding and Training: Guidance on configuring and using Compass Pro’s access, privacy, and security features.
• Product Documentation: Information about available controls, workflows, and system capabilities.
• Customer Support: Assistance with product-related questions and documentation requests.

Why It Matters

Regulatory compliance is not only about meeting legal obligations—it also supports patient trust.

Compass Pro is Canadian-built software with privacy and security safeguards designed to support patient information management, regulatory readiness, and responsible practice operations.