We publish what is true, not what is planned.

Data residency in Canada

Production runs in a Canadian region. A tenant region model records where each customer's data lives, and the choice is a property of the account rather than a line in a contract.

Isolation enforced where the data lives

Every table carries the tenant and row-level security enforces the boundary in the database. Privileged writes go through audited functions, not ad hoc queries.

Your keys, your storage

Enterprise customers bring their own encryption keys and can point evidence and document storage at their own cloud accounts. A private database per customer is available as an add-on.

Identity you control

Customer SSO, enforced MFA, invitation-based onboarding, auditor accounts that expire, and break-glass access that is logged and reviewed.

An audit trail you can hand over

Approvals, changes and exports are recorded with who, when and why. Reports are versioned so you can show exactly what the board was told.

AI off by default

No customer data reaches an AI provider until you turn processing on. The default endpoint is Canadian-region; you can bring your own keys; outputs are proposals until a person approves them.