Built for compliance, region by region

Compliance follows the region: we adopt each jurisdiction’s framework locally. And we separate what the law requires from what we choose to pursue, clear about where we are on each.

Legal Obligations

Frameworks we comply with

Statutory requirements that apply to how we operate on your behalf.

PIPEDA (federal)

Loi 25 (Quebec)

CRTC / DNCL (outbound)

GDPR (EU clients)

CASL

Voluntary Certifications

What we're pursuing

Not legally required, trust standards, we’re working toward, and won’t claim until earned.

SOC 2 Type II — in preparation

CyberSecure Canada — targeted

How your data is protected

Residency

Data lives in-region, under local law. Today that’s Canada, Loi 25-first, also covering PIPEDA. Each new region we enter gets its own local residency.

Encryption

AES-256 at rest and in transit, with multi-tenant isolation between clients.

Disclosure

Every voice interaction opens with a clear AI disclosure. No exceptions.