Compliance and trust

This is a compliance-oriented implementation, not a claim of compliance. Final Canadian and Quebec legal review is required before any paid or public launch.

Launch blocker: business identity and privacy contact details are configuration placeholders. No privacy officer name, address or complaint contact has been invented — these must be filled with real information before launch.

Privacy by design

We do not ask for Social Insurance Numbers, passport, PR card, health card, licence or banking numbers — ages, dates and status categories are enough. Everything stays in your browser on this device, and you can export or delete it all from the privacy centre. Optional purposes are off until you turn them on.

Source integrity

Each estimate shows where its parameters come from, how confident they are and when they were last verified. Illustrative planning rules stay visually distinct from verified parameters, and eligibility items carry a source field waiting for the official reference.

Commercial independence

Calculation code is technically separated from commercial data. Partner cards are sample placements with a disclosure beside each one. No payment, commission or partnership can change a calculation, an eligibility status or the order of a calculated result.

No advice, no determinations

The product does not determine eligibility and does not provide immigration, citizenship, tax, legal or financial advice. Paid advice or representation connected to an immigration or citizenship application must come from an authorized representative.

Accessibility and contact

We aim for keyboard-operable, labelled, readable and responsive interfaces. No independent audit has been done yet, and customer service contact details are still placeholders.
Current prototype limitations
  • Eligibility and deadline rules are illustrative planning aids, not official program criteria.
  • Some cost and benefit figures are labelled planning estimates rather than verified parameters.
  • Billing is mock only; the indicative Premium price is non-binding until billing is connected and reviewed.
  • Data lives in your browser's local storage on this device; there is no account, server or backup.
  • In-app screens are available in English and French; page titles and social sharing text are English-only, and no professional Quebec French review has been done.
Launch blockers
12 outstanding
These must be completed before a paid or public launch. Several need a lawyer, a privacy or security professional, or business-specific information we will not invent.

Legal entity and contact details

business

Fill BUSINESS_IDENTITY with the real legal name, address, customer service contact, privacy contact and designated privacy lead.

Canadian and Quebec counsel review

counsel

Privacy policy, terms, disclaimers, commercial disclosures, subscription contract and cancellation flow all require review before a paid or public launch.

Complete French localization for Quebec

business

Before offering services commercially in Quebec, the complete customer-facing product and customer service must be available in French with quality and conditions comparable to English; commercial publications must be available in French, and contracts of adhesion provided or offered in French first as applicable. In-app screens are available in English and French today; page titles and social metadata remain English-only, and no professional Quebec French review has been completed.

Official eligibility-rule verification

product

Replace every illustrative rule with the official program criteria and reference URL, then set confidence to verified with a last-verified date.

Privacy impact and data-transfer review

privacy

Complete a privacy impact assessment and a data-transfer review before enabling any backend, analytics or messaging processor, particularly before communicating personal information outside Quebec.

Processor agreements

privacy

Execute data processing agreements with every processor before it goes live.

CASL consent implementation

counsel

Implement express opt-in records, sender identification, current contact details and prompt one-click unsubscribe before sending any commercial electronic message.

Payment and consumer-contract review

counsel

Recurring billing, all-in pricing presentation, cancellation and refund policy and the distance-contract disclosure flow require counsel review before payments are activated.

Security testing

security

Security review and testing before any personal data is stored server-side.

Accessibility review

product

Independent accessibility review and remediation of the customer-facing product.

Breach and incident response

privacy

Document the incident procedure, roles, assessment of real risk of significant harm, notification and record-keeping duties.

Retention and deletion tests

privacy

Publish a retention schedule and test access, correction, deletion and consent-withdrawal workflows end to end.