Feature · Multi-Framework Accountability Mapping
We never say PHIPA to an Alberta clinic. Every province gets its own framework.
Canadian healthcare compliance isn't one framework — it's four, with different regulators, different documentation standards, and different penalty structures. CSM maps every governance control to the correct provincial framework automatically, with no double work.
Four frameworks · One platform
Built on Canadian law. Not retrofitted from US frameworks.
Every CSM control is natively mapped to PHIPA, HIA, PIPA, and Law 25. A clinic in Ontario and a clinic in Alberta get different governance programs — because they have different obligations. CSM handles the mapping so you don't have to.
PHIPA
Ontario
Regulator: IPC
Decision 298 AMPs · May 2025 handbook
HIA
Alberta
Regulator: OIPC AB
Same documentation burden as PHIPA
PIPA
British Columbia
Regulator: OIPC BC
Breach duties · Privacy program
Law 25
Quebec
Regulator: CAI
Phase 3 active · $25M penalties · French-native PIA
Mapping capabilities
Every control. Every framework. No duplication.
Cross-framework control mapping
Each governance control in CSM is tagged to every applicable framework. A Privacy Policy authored in Ontario is automatically mapped to PHIPA — and Law 25 if the clinic has Quebec patients.
Jurisdiction-aware rule engine
CSM detects your province and loads the correct framework, templates, and documentation standards. An Alberta clinic sees HIA controls. A Quebec clinic sees Law 25 and ÉFVP requirements.
Multi-province organizations
Operate in more than one province? CSM generates jurisdiction-specific evidence packages for each province — from a single governance workspace, with no duplication of effort.
Framework update management
When regulators update their guidance (IPC May 2025, IPC AI guidance Feb 2026), CSM updates the mapped controls and flags gaps in your existing program.
IPC handbook chapter mapping
Every chapter of the IPC's May 2025 handbook is mapped to specific CSM controls. 100% of the handbook's obligations are covered — documented and audit-ready.
French-native Law 25
Law 25 documentation is generated in French by default for Quebec organizations. PIAs (ÉFVP), privacy policies, and training logs are produced in compliant French.
Multi-Framework Accountability Mapping
One platform. Every Canadian provincial framework. No double work.
See how CSM maps your jurisdiction and get your accountability benchmark.