Sentrix

TGV · Self-assessment

TGV self-assessment: where does your product stand?

Six questions to place your product against TGV certification: is it mandatory, which groups of the 2026 grid to review and which prerequisites to plan for. Answer Yes, No or Not sure; a question left blank stays unanswered.

Already know TGV applies to you? Request a meeting

1. Is certification mandatory?

The 3 cases on the Government of Québec's official page. One is enough.

The product collects, retains, uses, modifies, discloses or destroys health or social services information.
It is linked, or will be linked, to a common-interest information asset that handles that information.
It will be deployed in more than one facility of the network, with web access.

2. Your product

It uses artificial intelligence (a SARIA, in the grid's vocabulary).
It is hosted in the cloud.
It had a penetration test less than a year ago.

This self-assessment processes your answers in your browser, with no transmission or storage by the tool. It does not replace the official verification.

Your summary

Answer the 3 official cases to place your product.

The groups of the 2026 grid to review

  • Security (112 criteria)
  • Personal and health information protection (108 criteria)
  • Artificial intelligence (69 criteria)
  • Interoperability (58 criteria)
  • Technology (26 criteria)
  • Performance (7 criteria)
  • General (2 criteria)

April 24, 2026 grid, 382 criteria. Not all of them apply to every product.

Official reference points

  • Preparation with the Bureau: 1 to 6 weeks depending on the product's maturity.
  • Verification by an external firm: 30 business days.
  • Verification stage: $15,000 plus taxes paid to Santé Québec under the standard agreement, not counting support and upgrades.
  • These reference points, stated by the official page, guarantee no date.

Then, every year

  • A self-declaration, reviewed by the Bureau, due at least 15 days before the certification's anniversary.
  • At least 1 penetration test a year, with vulnerabilities fixed or mitigated within 15 days of the report.
  • Every major change submitted to the Bureau at least 15 days before it goes into production, and nothing in production before it approves.
  • A disaster recovery exercise at a separate site at least every 2 years.
Request my TGV meetingRead the TGV guide

Frequently asked questions

Q01
Are my answers sent anywhere?
No. The self-assessment processes your answers in your browser. It does not send them to Sentrix and does not store them.
Q02
Does the self-assessment replace the official verification?
No. Only Santé Québec's Bureau de certification issues the certification, after verification by an external firm. The self-assessment helps place your product and prepare a first conversation.
Q03
Where do the questions come from?
From official documents published by the Government of Québec: the certification page, the April 24, 2026 criteria grid, the annual self-declaration form, the standard agreement, the standard tender clause and the orientations on penetration tests, multi-factor authentication and cloud computing.

Sources