TGV: four domains, one BCH certification dossier

The Trousse globale de vérification (TGV) is the certification framework administered by the Bureau de certification et d'homologation (BCH) of Québec's Ministère de la Santé et des Services sociaux (MSSS). It attests the conformity of technological products and services (PST) used in the province's health and social services network across four domains: security, personal information protection (PRP), performance, and technology.

Key facts

• BCH: the Bureau de certification et d'homologation administers TGV on behalf of the MSSS.
• 4 domains: security, personal information protection, performance, and technology, assessed for every PST.
• PST: technological products and services deployed in the health and social services network.
• Attestation: BCH-issued conformity attestation for procurement and contract compliance, to be maintained between cycles.

What TGV covers

TGV certifies that a technological product or service deployed in Québec's health and social services network meets the province's requirements across four evaluation domains.

1. Security: cybersecurity, access management, incidents and continuity
2. Personal information protection (PRP): collection, retention, disclosure and confidentiality incident notification
3. Performance: availability, response time and service level conformity
4. Technology: architecture standards, interoperability and lifecycle management
5. Certification attestation: BCH-issued conformity attestation for procurement and contract compliance
6. Renewal: continuous posture tracking to prevent lapses between certification cycles

What Sentrix provides for TGV

Pre-built TGV controls

All four TGV evaluation domains are pre-built into Sentrix. BCH framework updates are reflected automatically.

BCH certification dossier

Sentrix generates the evidence packages and attestation documentation required by the BCH for TGV certification submissions and renewal cycles.

Bilingual documentation

All TGV policies, evidence reports and certification packages are available in French and English.

Renewal tracking

Sentrix collects evidence continuously, so your BCH certification dossier is always current and renewal does not start from scratch.

Crosswalks

• Law 25: TGV's PRP domain and Law 25 share the same personal information protection requirements; evidence is mapped once.
• ISO 27001: TGV's security domain overlaps significantly with ISO 27001; organizations already pursuing ISO certification reduce TGV-specific remediation.
• CPCSC: for suppliers who also supply the defence sector.

Further reading

The Sentrix TGV guide describes the performance criteria PF01 to PF07 (minimum specifications, latency tolerance, bandwidth, link traffic share, expected response times, packet handling, retention and recovery delays), each with how to implement and verify it; the TGV support service covers dossier preparation. Public institution or para-public body: public sector solution; healthcare solution supplier: healthcare solution.

Get your TGV certification dossier ready.

Contact us