What we do
A full security & governance program, sized to your practice
Security & Data Governance Policy
We write the policies that keep client health information safe — and keep you compliant with BC's PIPA and Canada's PIPEDA.
Microsoft 365 Hardening
Intune, Purview and Defender configured to lock down devices, encrypt data in transit, and catch breaches before they spread.
Device & Contractor Compliance
Clear, practical device policies for contractors and BYOD staff — password rules, encryption, screen locks.
Breach Response Planning
A step-by-step plan for the day you hope never comes, so your team knows exactly who to call.
Data Residency & Records Retention
Keep client data on Canadian soil and retained for exactly as long as regulations require.
Workflow & Efficiency Consulting
Move off fragile spreadsheets onto secure, auditable systems that scale with your practice.
01
Assess
We map your tools, data flows, and gaps against PIPA/PIPEDA.
02
Design
Policies and safeguards sized to your practice, not a hospital system.
03
Implement
We configure Microsoft 365, devices, and workflows with your team.
04
Maintain
Annual audits keep you compliant as regulations and your practice evolve.
About Sitka Labs
One advisor. Your whole security program.
Sitka Labs is built to work the way small healthcare practices do: one point of contact, plain-language guidance, and solutions sized to small clinics — not enterprise IT.
Meet the team →Case study
A BC allied-health practice, hardened without slowing down care
We helped a Vancouver-based occupational therapy practice move off a managed-partner Microsoft plan, harden device compliance for a fully remote contractor team, and stand up a breach response plan — closing gaps identified during a security review.
Read the case study →
Ready to protect what matters?
Book a free 30-minute consultation. We'll review your current setup and outline where the risks are.
Vancouver, BC, Canada · hello@sitkalabs.ca