Your EMR provider secures patient records in its software. TUCU secures everything else, from the computers and phones that open those records to email, network and backups.
Your EMR vendor is not responsible for:
Office computers, tablets and phones that open patient records. These need encryption, patching and EDR.
Firewall, WiFi, guest network separation and email security. Phishing email is a common way into a practice.
Staff access, onboarding and offboarding, backups of everything outside the EMR, and protection from ransomware.
What we put in place for every practice we manage:
Every computer, tablet and phone that opens patient data is encrypted, patched and protected by EDR.
Firewall, WiFi security, guest network separation, VoIP phones and monitoring.
Encrypted patient communication, phishing protection and spam filtering.
Password policies, multi-factor authentication, and secure onboarding and offboarding of staff.
Backups of everything beyond the EMR, tested recovery and ransomware protection.
Fast help desk, computer setup, printer support and technology planning.
One team manages every part of your IT. Each service below runs inside a fully managed plan.
Help desk, devices, accounts, patching and backup, run by in-house technicians who know your people and your setup by name.
Intune, Entra ID and conditional access configured properly, so only managed devices reach company data and access ends when someone leaves.
EDR on every managed device and identity threat detection on email and cloud accounts, monitored 24/7.
Help putting in place the security safeguards that PHIPA and PIPEDA expect, with documentation and the controls to back it up.
Macs, iPhones and iPads managed to the same security standard as Windows, by Apple Certified Consultants.
Firewalls, WiFi, servers and imaging equipment connections configured, segmented, kept current and monitored.
TUCU fills that need for us
“We have been using TUCU’s services for well over a year and they have taken away our tech aches! As a small business owner, we do not have an IT person on our staff and TUCU fills that need for us. If any issues come up they are always quick to respond and help us get back up and running. We are so happy we found them!”
TUCU takes good care of our server
“We have been using TUCU as our computer support company as needed since 2010. Our dental office server support has to be good, because without it, we can’t serve patients. TUCU takes good care of our server. They also built our website and manage it for us. Their service is prompt, friendly, professional and easy to recommend.”
Most practices assume their EMR vendor has security covered. The vendor protects its database. It does not protect your office computers, tablets and phones, your network and WiFi, your email, staff access or your backups.
Those are the places an attacker gets in. A practice can have a well protected patient database and still lose access to it for days, because ransomware locked every computer in the office.
TUCU manages and secures IT for medical and dental practices across Toronto and Durham Region, and helps you put in place the security safeguards that privacy laws such as PHIPA and PIPEDA expect.
Every plan is built around your team, and covers:
Not sure yet? See our managed IT pricing ranges.
No. EMR providers secure the patient database, not the devices that open it. Every computer, tablet and phone in your practice needs its own protection.
Your patient database stays safe in the cloud, but you cannot reach it, because the computers, network and imaging systems in your office are locked. Cloud-hosted EMRs protect the database. They do not stop ransomware on your local network and devices.
That is why we protect every device, back up everything outside the EMR and test recovery.
Yes. Under Ontario’s Personal Health Information Protection Act (PHIPA), the health information custodian is responsible for protecting personal health information. In a private practice that is the physician, dentist or practice, not the EMR vendor. Your EMR provider works on your behalf, but the duty stays with you.
PHIPA requires custodians to take reasonable steps to protect personal health information against theft, loss and unauthorized use, disclosure, copying, modification or disposal. If health information is stolen, lost or accessed without authority, you must tell the affected patients at the first reasonable opportunity. In some cases, such as theft or a significant breach, you must also notify the Information and Privacy Commissioner of Ontario.
That duty covers patient information wherever it sits, not only inside the EMR. It includes referral letters saved to a desktop, scanned documents, imaging files, email, and the laptops and phones your team uses.
We protect those systems for you: every device, email, accounts and access, backups and recovery testing, with documentation of the controls in place. We do not give legal advice. Your privacy officer, your college or your lawyer decides what applies to your practice.
Yes. We support servers and integration for Dentrix, Open Dental and AbleDent, imaging equipment connectivity, network segmentation, and secure remote access for dentists and staff.
Yes. We support PS Suite, Accuro and TELUS Health EMR environments, telehealth security, and secure connections between locations, whether each site uses the same EMR or a different one.
Our critical response time is under 15 minutes. Problems that affect appointments, EMR access or digital imaging go to the same in-house technicians who manage your systems.
No. We work with clients on a fully managed basis only. We do not take single jobs, emergency call outs for non clients, or hourly project work.
Managed IT is a monthly fee based on the number of staff and devices you have and the security and compliance requirements you need to meet. Team size changes what you pay. It does not change what you need.
Our pricing page shows the ranges, so you know where you stand before you book a call.
Other industries we serve
Book a free discovery call to review your fully managed IT needs. If we’re a good fit, we’ll send you a tailored proposal and quote.
