Sovereignty
Digital sovereignty means being able to guarantee that no foreign third party can compel access to your information. That is decided in the architecture, before the first line of code.
The Clarifying Lawful Overseas Use of Data Act (CLOUD Act) lets US authorities compel a provider under their jurisdiction to hand over data it controls, even when that data is hosted abroad. A data centre located in Canada is therefore not enough: what matters is the provider's legal attachment.
Rather than sending your documents to a public AI service, we run models on infrastructure we control. Processed content stays within the agreed perimeter and is never used to train external models.
Data is hosted in Quebec or Canada. Any transfer outside Quebec is subject to a privacy impact assessment and explicitly disclosed in the contract.
Encryption in transit and at rest, least-privilege access, strong authentication for administrative access, access logging and documented incident response procedures.
No data resale, no advertising profiling, no non-essential trackers without consent, no transfer to any service whose legal attachment we cannot document.
Our full technical framework (hosting, models used, security measures, subprocessor register) will be published in this section.
