Compliance software for Canadian small businesses
Canadian compliance,without the law firm.
See where your business stands on CASL, PIPEDA and Quebec Law 25 in about two minutes — then work through a task plan, keep a breach register, and export the records when someone asks for them.
Free · 8 questions · no account needed
- Scored against CASL, PIPEDA and Quebec Law 25, with AODA guidance
- Primary compliance data hosted in Canada (Montréal region)
- Built for owners and marketers, not compliance departments
Answer one question now
This is the real first question. Pick an answer and the rest of the check carries it over.
Do you send commercial electronic messages (marketing emails) to Canadian recipients?
- A score out of 100 and the specific gaps behind it
- Which of CASL, PIPEDA and Quebec Law 25 apply to you
- An email with the same summary, so you have it on file
Free · about 2 minutes · you enter an email on the last step to see and receive your results.
Four Canadian laws, and exactly how far we go on each
As PIPEDA compliance software it covers the federal privacy rules, and it does the same for CASL, Quebec Law 25 and AODA. We publish an obligation-by-obligation map for every law we support. A feature does part of the work, we explain it, it is dated on the roadmap, or we say we do not cover it.
What you get after you sign up
Screens from the live product, not mockups.
Your score and gap list
The free check returns an overall score with the specific CASL and PIPEDA gaps behind it.
A dashboard with your open tasks
Your readiness score, the questions still to answer, and the compliance tasks your answers generated.
The same thing on a phone
The check and the dashboard work on a phone, so you can answer between other jobs.
Or watch a minute of the real dashboard
A one-minute walkthrough of the live dashboard, recorded on our demo account.
Five steps, all available today
- 01
Take the free check
Eight questions, about two minutes, and a score with the gaps behind it.
- 02
Run the full self-assessment
Fifteen questions scoring CASL, PIPEDA and — on Business — Quebec Law 25.
- 03
Work the task plan
Your answers become tasks tagged by regulation and priority.
- 04
Use the tools
Check an email footer against CASL; log privacy breaches in the register.
- 05
Keep the record
Export the audit log as CSV whenever someone asks to see it.
Not yet available
- Automated daily compliance scanning (Fall 2026)
- Third-party integrations (Mailchimp, HubSpot, Shopify) (Fall 2026)
Canadian businesses without a legal department
If any of these describe you, the laws we cover almost certainly apply.
E-commerce and retail
- You send a newsletter or promotions
- You keep customer accounts or order history
- You use analytics or advertising pixels
Agencies and professional services
- You hold client contact lists
- You email prospects
- You handle client data on their behalf
Clinics and practices
- You book clients or patients by email
- You keep records with personal details
- You send appointment or recall messages
Working in a specific field? Privacy compliance for dental clinics · How we compare to the alternatives
Honest about where we are
Built on the actual statutes
Every obligation we list cites its section and links to CRTC, OPC or CAI guidance.
See the coverage mapsData in Montréal
Primary compliance data is stored in a Canadian region, encrypted in transit and at rest.
Read about securityCertifications only when earned
SOC 2 Type I is in progress. We will say it is done the day it is done, and not before.
Trust centreA person, not a ticket queue
We answer support email directly, and aim to reply within one business day.
Contact usPlans from $49 a month
Prices in Canadian dollars. Every paid plan starts with a 14-day free trial, and you can cancel before it ends at no charge.
Free compliance assessment
Start Free Assessment- 8-question compliance assessment
- Risk score and gap analysis
- Regulations knowledge base
- PDF compliance report
For solo founders and freelancers
Start 14-day free trial- Everything in Starter
- Full 15-question self-assessment & readiness score
- Auto-generated compliance task plans
- PIPEDA breach register (24-month log)
- CASL tools & knowledge centres
- Audit log with CSV export
- Email support
Roadmap: PIPEDA privacy policy generator — Fall 2026
For growing Canadian SMEs
Start 14-day free trial- Everything in Solo
- Quebec Law 25 scoring & task plans
- Printable compliance report
- Priority support
Roadmap: AODA accessibility scanner & vendor tracking — Fall 2026
For teams managing compliance across multiple users
Contact Sales- Everything in Business
- Multi-user access for one organization
- Role-based access (admin / member / viewer)
- Centralized audit log across your team
- Priority support
Straight answers on the rules
Does CASL apply if I only email existing customers?
Yes. An existing business relationship gives you implied consent, but it expires — two years after a purchase, six months after an inquiry — and every message still needs your identification and a working unsubscribe.
Do I need express consent for every marketing email?
Express consent never expires and is the safest basis. Implied consent works but is on a clock, and a pre-checked box doesn't count as express under CASL.
Does PIPEDA apply to my small business?
If you handle personal information in commercial activity, almost certainly — unless your province has a substantially similar private-sector law (BC, Alberta, Quebec), and even then PIPEDA still covers federally regulated work and data crossing borders.
What does Quebec Law 25 require if I sell into Quebec?
A designated person in charge of privacy, a register of confidentiality incidents, privacy impact assessments for some projects, and French-language notices.
Do I have to report every privacy breach?
No — PIPEDA requires reporting breaches that create a real risk of significant harm to the OPC and affected people. But you must keep records of every breach, significant or not, for 24 months.
Does AODA apply to me?
If you're an Ontario organization with 20 or more employees you file accessibility reports (next deadline December 31, 2026); at 50 or more, your public website must meet WCAG 2.0 Level AA.
General information, not legal advice. More questions about the product
Find out where you stand
Eight questions, about two minutes, and a score you can act on today.
Free · no account needed