Our Promise: Uncompromis ing Security and Compliance
Our Promise: Uncompromising Security and Compliance
At Petal, security isn’t an afterthought—it’s the foundation of everything we do. Our cloud-based platform empowers healthcare organizations to orchestrate workflows in real time, and we safeguard every interaction with industry-leading security measures.
Compliance You Can Trust
An independent CPA firm audits Petal yearly to ensure an independent opinion of its compliance with AICPA SOC2 Type 2 controls and issues a formal SOC2 report.
Petal is certified by the Certification Office of the Ministry of Health and Social Services of Quebec with the security and privacy framework TGV, which includes over 200 controls.
We also align with GDPR and other global privacy frameworks, ensuring your data is handled with transparency and integrity. Annual independent audits keep us accountable—so you can stay focused on care, not compliance.
Data Ownership & Residency: Your Data Stays Yours
Your data is your property—always.
Petal hosts all client data exclusively in Canada, ensuring compliance with local regulations and giving you full control over access, permissions, and roles. We never compromise on sovereignty or security.
Advanced Encryption & Secure Cloud Infrastructure
Every byte of your data is protected:
- In Transit: Encrypted with TLS 1.2+
- At Rest: Secured with AES-256 encryption
Petal runs on Microsoft Azure, a globally trusted cloud environment that meets the highest security standards, including ISO 27001, HIPAA, GDPR, and PCI DSS. This means your data is protected by the same infrastructure trusted by leading enterprises worldwide.
Why it Matters
Healthcare data is sensitive, and trust is everything. With Petal, you’re not just adopting a platform—you’re partnering with a company that treats your data with the highest level of care, compliance, and security.
CHUM Case Study
See how one of the largest hospitals in Canada is leveraging the safety, security, and efficiency of Petal to make a difference for its patients and staff.
