Hear it live: call our AI receptionist (450) 367-9990 Customer login
365vox
Book a call Try free for 7 days
Try it free for 7 days Book a discovery call Call the AI demo: (450) 367-9990 Customer login / sign up

Security · Canada

PIPEDA and PHIPA for Canadian organizations

365vox is based in Toronto. Canadian clinics, property managers and public bodies can keep call data in Canada, specified in the contract.

No credit card required. Cancel anytime.

Hear it answer — call our AI receptionist(450) 367-9990

Last updated October 7, 2026

The frameworks

PIPEDA is Canada’s federal privacy law for private-sector organizations that collect personal information in commercial activity. PHIPA is Ontario’s law governing personal health information held by health information custodians and the agents who handle it for them. Other provinces have their own health and privacy laws.

How your AI receptionist supports them

  • Canadian data residency — choose Canada for data storage, specified in your contract
  • Limited collection — the agent collects only what each call type needs, by your call flow
  • Transparency — callers hear that they’re speaking with an AI in the first sentence
  • Access controls — authorized roles only, every access logged and exportable
  • Retention and deletion — retention you choose up to 30 days, encryption at rest, verifiable deletion
  • No secondary use — call data is never used to train models

This page explains how 365vox approaches Canadian privacy requirements. It isn’t legal advice — your organization remains responsible for its own obligations.

PIPEDA and PHIPA FAQs

Can our call data stay in Canada?
Yes. Choose Canada as your data location and it’s specified in your contract.
Is 365vox a Canadian company?
Yes. 365vox is based in Toronto, Ontario.
Does it work for Ontario health information custodians?
Yes. Clinics can keep data in Canada, control access and retention, and keep clinical decisions with their team. Talk to us about your PHIPA requirements on the discovery call.
How do callers know an AI is collecting their information?
The agent identifies itself as an AI in the first sentence of every call.
Can we limit what information is collected?
Yes. Each call flow asks only for what that call type needs, and you approve it.
How do we respond to an access request about a call?
Recordings and transcripts can be retrieved within your retention period and exported.
What happens to our data if we leave?
A complete export, then deletion within 30 days with written confirmation.
Do you sign agreements for health information?
Yes. We sign the agreements your organization needs before your first call.

Your front desk is open 40 hours a week. Your business never closes.

No credit card required. Cancel anytime.Just forward your phone line — we'll handle the rest.

Or hear it first — call our AI receptionist(450) 367-9990

Not ready to start your free trial? Book a no-obligation discovery call.

Hear it Try it free for 7 days