TGV MSSS: certification for RSSS suppliers
The Global Verification Toolkit (TGV) attests that a version of a technology product or service meets Quebec health and social services network (RSSS) requirements for security, personal information protection, performance and technology.
What is the TGV?
The TGV is administered by the Certification and Approval Bureau (BCH) of Quebec's Ministère de la Santé et des Services sociaux (MSSS). It is not aimed at clinicians: it concerns technology suppliers who want to do business with the RSSS.
Why it matters to your business
If your company provides a technology product or service to a Quebec healthcare organization, TGV certification becomes a contractual requirement, not a choice. It is the concrete buying trigger RSSS clients will demand before signing.
An RFP, contract renewal or supplier due diligence: without a current TGV attestation, your proposal may be rejected even if your solution works well elsewhere. This is not compliance for compliance's sake: it is a condition of access to Quebec's public health market.
The 3-step process
Step 1: supplier support by the BCH in preparation for verification. Duration varies from 1 to 6 weeks depending on product maturity.
Step 2: verification by a specialized external firm, over approximately 30 business days.
Step 3: post-certification follow-up to ensure ongoing compliance over time.
How Certi360 can support you
Certi360 helps SMBs and IT suppliers structure preparation before TGV verification: requirements mapping, gap prioritization and documentation ready for the BCH and external firm. Our compliance and certification support covers this type of contractual journey in executive language, without unnecessary jargon.
See our Compliance & certification page to learn how we translate requirements into a concrete action plan.
Is the TGV mandatory to sell to the RSSS?
For technology products and services covered by the MSSS program, TGV certification is the attestation expected by the network. If you sell or want to sell to the RSSS, anticipate this requirement in your contracts and commercial timeline.
How long does TGV certification take?
Allow 1 to 6 weeks of BCH-supported preparation, then approximately 30 business days for external verification. Post-certification follow-up extends beyond to maintain compliance over time.
How does the TGV differ from CyberSecure Canada or ISO certification?
The TGV is specific to Quebec's RSSS and covers security, personal information protection, performance and technology for a precise version of your product. CyberSecure Canada is a voluntary federal program for SMBs. ISO certifications (such as ISO 27001) are distinct international frameworks. These efforts can complement each other but do not replace the TGV for Quebec's health market.
Who administers the TGV?
The Certification and Approval Bureau (BCH) of the MSSS administers the program. Verification is performed by a specialized external firm mandated as part of the process.