How we protect your documents
You are trusting us with identity documents and important paperwork. Here is plainly what we do to keep them safe — and what we do not claim.
Encrypted in transit and at rest
Every connection uses HTTPS/TLS, and your documents and account data are encrypted where they are stored. Your information is never sent or held in plain text.
Stored in Canada
Your identity information and completed documents are stored in Canadian data centres. Where a service provider processes data for us, we limit what they receive to what they need.
Private to your account
Your documents are accessible from your own signed-in account and to the professional handling your service. Access is enforced at the database level, not just in the interface.
Secure, expiring sharing
If you share a completed document, the link is unguessable, can be set to expire or cap views, and can be revoked at any time. Every open is recorded.
Full audit trail
Key actions on your file — upload, verification, session, signing, download, refund — are recorded in an append-only log, so there is a clear record of what happened and when.
Identity checked by the professional
For commissioning and notarization, the commissioner or notary confirms each signer’s government photo ID at the session, as Ontario law requires. We keep only what is needed to evidence the service.
How we verify the professionals
Only an approved, currently-authorized Ontario commissioner or notary public can be assigned to your file. Every professional passes through the same review before they can take work, and their status is checked against their standing at the time of your appointment.
- 1
Application
Identity, contact and the services they are authorized to perform.
- 2
Identity check
Government photo ID confirmed before any account is activated.
- 3
Authorization
Commissioner or notary appointment confirmed for the services offered.
- 4
Admin review
A person reviews and approves — no self-serve activation.
- 5
Active & monitored
Status can be suspended; each change is written to the audit log.
Current status — demonstration
The access controls, private storage, expiring share links and audit logging described above are built into the platform. External services that a live service depends on — payment, automated identity verification, the video session and email — are being connected and independently verified before we accept real customers. We will not describe a control as operational, or take a real payment, until it is. Names, fees, hours and credentials shown across this site are placeholders for this demonstration.
What we do not claim
We describe only controls we actually operate. We do not advertise “bank-grade” or “military-grade” security, and we do not claim SOC 2, ISO or other independent certifications we have not obtained. If that changes, we will say so here with the specifics.
Our handling of personal information is governed by our Privacy Policy (Canada’s PIPEDA), and your rights as a customer by our Terms.
Have a security question?
Ask before you upload anything — we are happy to explain how your document is handled.
Contact us