Framework · TGV

TGV: the Québec health sector certification no US GRC platform supports natively.

The Trousse Globale de Vérification (TGV) is the certification framework administered by the Bureau de certification et d’homologation (BCH) of Québec’s Ministère de la Santé et des Services sociaux (MSSS). It attests the conformity of technological products and services (PST) used in the province’s health and social services network across four domains: security, personal information protection (PRP), performance, and technology. US-built GRC platforms do not support it. Sentrix was built in Montréal with TGV as a native framework—pre-built controls, bilingual documentation, and crosswalks to Law 25 and ISO 27001.

BCH
Official certification body—the Bureau de certification et d’homologation administers TGV on behalf of the MSSS
4
Evaluation domains—Security, Personal Information Protection (PRP), Performance, and Technology assessed for every PST
FR / EN
Fully bilingual TGV documentation, policies and certification packages available in French and English
Law 25
Cross-mapped—TGV’s PRP domain aligns directly with Québec’s privacy law, satisfying both from one evidence set
What TGV covers

Security. Personal Information Protection. Performance. Technology.

The TGV certifies that a technological product or service (PST) deployed in Québec’s health and social services network meets the province’s requirements across four evaluation domains. Sentrix maps your technical and organizational controls to each TGV domain and collects evidence continuously—so your BCH certification dossier is always current and renewal cycles are fully automated.

  • Security : cybersecurity, access management, incidents and continuity
  • Personal Information Protection (PRP) : collection, retention, disclosure and breach notification
  • Performance : availability, response time and SLA conformity
  • Technology : architecture standards, interoperability and lifecycle management
  • Certification attestation : BCH-issued conformity attestation for procurement and contract compliance
  • Renewal monitoring : continuous posture tracking to prevent lapses between certification cycles

TGV · Domain coverage

CONTINUOUS MONITORING
Security✓ Compliant
Personal Information Protection✓ Compliant
Performance▲ Review due
Technology✓ Compliant
BCH certification dossier✓ Ready
Full TGV capabilities

The only GRC platform built for Québec’s health and social services network.

Native TGV controls

All four TGV evaluation domains are pre-built into Sentrix—not a custom mapping on top of a US platform. BCH framework updates are reflected automatically.

Law 25 crosswalk

TGV’s PRP domain and Québec’s Law 25 share the same personal information protection requirements. Sentrix maps evidence once and satisfies both simultaneously.

ISO 27001 crosswalk

TGV’s security domain overlaps significantly with ISO 27001. Organizations already pursuing ISO certification reduce TGV-specific remediation to a fraction of the total effort.

BCH certification dossier

Sentrix generates the evidence packages and attestation documentation required by the BCH for TGV certification submissions and renewal cycles.

Bilingual documentation

All TGV policies, evidence reports and certification packages are available in French and English—as required for Québec health sector organizations.

Canadian data residency

All compliance data stored in Canadian data centres. Required for PSTs operating within the MSSS network under provincial data sovereignty requirements.

Get your TGV certification dossier audit-ready.

30-minute demo in French or English. Real infrastructure. No slides.