Built to protect your business and your customers.
No system is leak-proof, so we don't claim to be. We follow a written security standard, and every system is checked against it before it goes live.
What every system meets before go-live.
Runs in your accounts
Systems connect to your own email, calendar and software with the narrowest permissions available. You can revoke access in one click.
Never used to train AI
We use AI providers on business terms that exclude training on your data, with data retention switched off where it's offered.
Hosted in Canada
Setups we manage run on a server in a Canadian data centre, one per client. Nothing is shared between clients.
Scam-resistant
The AI that reads incoming messages can't send, pay, forward or delete anything, so a malicious email can't make it act.
Sensitive details left out
SINs, card numbers and bank account numbers are stripped out before the AI sees anything, or kept in the systems built for them.
Logged, with an off switch
Every action is logged so you can see what happened and why. One switch pauses every automation.
Designed around the laws you work under.
Privacy (PIPEDA and Quebec's Law 25)
We collect only what each task needs and help you update your privacy notice to say AI tools process data. Quebec clients get a privacy impact assessment first.
Anti-spam (CASL)
Every message identifies your business and has a working opt-out. Messages only go to people who contacted you or gave consent.
Hiring rules
Job postings include the disclosures your province requires, including Ontario's AI-use statement. The AI never scores, ranks or rejects applicants.
Records and tax
Tax rates come from your accounting system, never hard-coded, and original documents stay attached to every record for CRA purposes.
This is how our systems are built, not legal advice. Your own obligations depend on your business and province.
A written plan, not a scramble.
Contain
Pause the automations and revoke access tokens.
Assess
Use the logs to find what happened and what was affected.
Tell you
You hear from us within 24 hours, with the facts.
Support you
We provide what you need for any notice to customers or regulators.
Have a security questionnaire?
Send it over. We'll answer it in writing before you commit to anything.