- Home
- Trust center
How we protect
your data, and ours.
A security firm's own house should be in order. Here is what we hold ourselves to, and how to get the evidence.
SOC 2 Type II report
Our 2026 SOC 2 Type II report is available to clients and prospects under NDA. Request it and our team will send it through our secure portal. We do not publish the report.
Data residency
100% Canadian-owned, with primary operations in Canada. We also serve international clients and partners, deploying solutions globally to meet each client's data-residency requirements. Canadian clients' data stays in Canada. Aligned with PIPEDA and Quebec's Law 25.
Responsible disclosure
Found a vulnerability in one of our sites or products? Our security.txt lists how to reach us. We acknowledge reports promptly and do not pursue good-faith researchers.
security.txt →PrivacyPrivacy
How we collect, use and protect personal information, including the analytics and CRM tools this website uses.
Privacy policy →Controls, in plain language.
- Independent SOC 2 Type II audit of our security controls
- Information security management aligned to ISO 27001
- Canadian clients' data stays in Canada; international deployments match each client's residency requirements
- Evidence handled with documented chain of custody
- Strong security headers on this site: HSTS, a content security policy and strict framing rules
Need more for your vendor review?
Send us your questionnaire. We will complete it and include the evidence your auditors expect.