Architecture security
Application firewall, encrypted transport on every connection, role-based access control, hardened identity management, privilege separation.
Government compliance
Compliance verified by government, not self-declared.
Silabmed is one of three LIS that obtained TGV certification from MSSS Quebec. Our compliance is validated by independent audits, not by self-declaration.
CERT · MSSS · 2025 · TGV
TGV — Comprehensive Verification Suite
Issued by the Office of Certification and Approval (BCH) of Quebec's Ministry of Health and Social Services, the TGV certification attests to the compliance of a version of a technology product or service (PST) with health sector requirements regarding security, personal information protection (PRP), performance and technology.
- Issued by
- MSSS Quebec
- Obtained on
- November 2025
- Rank
- 1 of 3 certified LIS
What the certification validates
Integration with provincial systems
Automatic transmission to the DSQ (Dossier santé Québec, the Quebec health record), COCD (Cyber Defence Operations Centre) compliance, interoperability with MSSS FindCandidates.
Laboratory management functionality
Complete sample lifecycle — registration, traceability, storage, result validation — quality control with Westgard rules and Levey-Jennings charts, electronic signatures.
Reliability and operational continuity
Availability, redundancy, encrypted backups, business continuity plans, operational monitoring, incident management compliant with MSSS requirements.
Independent validations
Three external validations in 2025
Beyond TGV certification, Silabmed underwent two independent security audits performed by specialized firms.
- November 2025
COCD audit completed
The Quebec government's Cyberdefense Operations Center validated that Silabmed meets the operational cybersecurity requirements for DSQ integration. All control points were passed successfully.
- November 2025
Intellisec penetration test
Following TGV certification, Intellisec conducted an in-depth penetration test and independent security assessment. All findings were remediated and re-verified.
- Ongoing
Monitoring and reviews
Continuous vulnerability management programme, regular renewal of X.509 certificates, tracked application of security patches.
Technical standards met
The standards that structure Silabmed.
| Standard | Area | Description |
|---|---|---|
| HL7v3 | Health messaging | Health messaging standard used for communication between systems. Complete, certified implementation. |
| X.509 | Digital signatures | Cryptographic authentication of messages, integrity of exchanged data, automatic certificate renewal. |
| WAF | Web security | Application firewall at the entry layer. Protection against common web attacks: injection, cross-site scripting, remote execution, enumeration. |
| TLS | Secure transport | Encryption enforced on every connection, protection against protocol downgrade attacks. |
| RBAC | Access control | Role-based permission model, separation of duties, complete logging of accesses and modifications, automatic session expiration. |
| ISO 17025 | Laboratory accreditation | ISO 17025 accreditation preparation — general requirements regarding the competence of calibration and testing laboratories. |
MSSS Quebec certified · November 2025
Request the certification documentation
Under a non-disclosure agreement, our team can provide the TGV attestation, the COCD audit summary and the Intellisec penetration test report.