What is an information system (IS)?
Not just computers: how information moves through a business, including the people who handle it.
An information system (IS) is a structured set of hardware, software and human resources that lets an organization collect, store, process and share information. It is broader than the computer system alone: the people, the rules they follow and even paper forms are part of it, because they shape how information actually flows.
In short
- An IS combines three kinds of resources: hardware, software and people.
- The computer system is only the hardware-and-software part of the IS.
- In Quebec, overhauling an IS that handles personal information requires a privacy impact assessment.
- A small service business can map its IS on a single page.
What makes up an information system?
The OQLF defines an information system as a structured set of material, software and human resources used to collect, store, process and disseminate information. Its English equivalents are information system and IS. The entry adds that information systems support decision-making, process improvement and internal and external communication [1].
It also draws a useful line: the computer system is only the IT part, meaning hardware and software, of the information system [1]. A technician jotting a reading in a notebook, a dispatcher phoning an address to a crew and a rule like "call every quote back after seven days" are all part of the IS, computer or not.
Information system or computer system: what's the difference?
| Element | Computer system | Information system |
|---|---|---|
| Computers, phones, servers | Yes | Yes |
| Software (accounting, calendar, CRM) | Yes | Yes |
| People who enter and use information | No | Yes |
| Rules and procedures (who does what, when) | No | Yes |
| Paper forms, the shop whiteboard | No | Yes |
What does a service company's IS look like in practice?
What does Quebec privacy law require for an information system?
Quebec's private-sector privacy act targets information systems directly. Any business must conduct a privacy impact assessment for any project to acquire, develop or overhaul an information system involving personal information, and must consult its person in charge of privacy from the outset [2].
The same section requires that the project allow computerized personal information to be released to the person concerned in a structured, commonly used technological format [2]. Quebec's access-to-information commission adds that the assessment must be proportionate to the sensitivity, purpose, quantity, distribution and medium of the information [3].
Moving from a spreadsheet to a software-as-a-service customer tool is exactly that kind of acquisition project. See our entry on Law 25.
What mistakes do businesses make with their information system?
- Treating IS as "the computer stuff" and forgetting people and procedures when switching tools.
- Adding one app per problem until the same data lives in five places.
- Not knowing where customers' personal information sits, or who can see it.
- Changing management software without a privacy impact assessment.
- Never writing rules down ("who confirms appointments?"), so they leave with the employee.
Where does Pilotiko fit in an information system?
Pilotiko is one piece of the IS, not the whole thing. It shows a virtual office where each department is a room, with staff and AI agents, urgent items and key indicators drawn from your real data. It handles online booking, real open slots and proposed assignment, and it produces internal reports. Accounting, payroll and other tools stay separate. Its AI agents prepare work, and anything touching a customer, money or a send waits for a person's approval.
Frequently asked questions
What does IS mean in business?
IS stands for information system: the hardware, software and human resources a business uses to collect, store, process and share information. In French it is système d'information, or SI.
Does an information system have to be computerized?
No. The computer system is only one part of it. Procedures, paper documents and the people who handle information all belong to the information system.
Does a small business have an information system?
Yes, every business has one, whether or not it uses the term. A calendar, accounting software, email and the team's habits already form an IS. The real question is whether it's organized.
When is a privacy impact assessment required in Quebec?
Quebec's private-sector act requires one for any project to acquire, develop or overhaul an information system that handles personal information. It has to be proportionate to the sensitivity and quantity of the information involved.
What's the difference between an IS and an ERP?
The IS is the company's whole information setup. An ERP is software that can become its centre by integrating several functions in one database, but it remains one component of the IS.
Sources
- Office québécois de la langue française (Vitrine linguistique), système d'information (GDT) (accessed on October 15, 2026).
- LégisQuébec, Act respecting the protection of personal information in the private sector (CQLR, c. P-39.1) (accessed on October 15, 2026).
- Commission d'accès à l'information du Québec, Principaux changements apportés par la Loi 25 (accessed on October 15, 2026).
Read next
What is an ERP (enterprise resource planning) system?
What an ERP system is, what it integrates, a double-entry calculation for a Quebec service company, and the classic mistakes of a first ERP project.
Quebec Law 25: what changed for small businesses?
Quebec's Law 25 explained for small service businesses: the person in charge, consent, incidents, automated decisions, penalties and a costed starter checklist.
What is an API?
What an API is: the contract that lets two pieces of software exchange data. Includes a worked example for a Quebec service SME and common mistakes.
What is SaaS (software as a service)?
What SaaS means, how it differs from installed software, a three-year subscription calculation for a Quebec service SME and the contract traps to avoid.