Data sovereignty
Built so your data stays in Canada.
For procurement and privacy reviewers: where the data lives, how privacy law shapes what we build, and what we will put in writing.
Where your data lives
In Canada, by architecture, not by a setting we could change later. The systems we build host and process data on Canadian infrastructure, and a citizen-facing tool serves residents from inside the country. Residency is a property of how the thing is built, which is why we can put it in a contract.
FIPPA by design
We build to FIPPA from the first design decision. Each client gets its own isolated environment, so your data never shares a tenant with anyone else. Citizen-facing tools collect no personal information by default: an assistant answers from your published content without asking residents who they are. Data we do hold carries retention limits you set, so nothing lingers past its purpose.
The US disclosure-law reality
A platform hosted by a US company is subject to US disclosure law, including the CLOUD Act, which can compel a US provider to hand over data regardless of which country the servers sit in. This is a property of where the provider is incorporated, so a Canadian data center owned by a US company does not close the gap. It is the reason a genuinely Canadian stack clears procurement gates that a US-hosted one often cannot.
Everything client-facing carries our sign-off
Nothing reaches a resident or a council without our judgment on it. AI is the tool that lets a small team do expansive analysis; the decisions about what the evidence means, and what carries your name, are ours. That discipline is what lets us move fast and stay defensible.
Read how the research is doneWhat we will put in writing
Data-residency guarantees as a term of the engagement. Support for your privacy impact assessment, so your privacy office has what it needs to sign off. The isolation and retention commitments above, written into the contract. If your procurement team needs a specific clause to clear a gate, tell us, and we will work to it.
Need this in a form your privacy office can sign?
Tell us what your procurement or privacy review requires. We will tell you plainly what we can commit to in writing.
Start a conversation