Answers about setup, the Canadian laws we cover, pricing, and how your data is stored. Can't find what you need? Contact us.
Canada Compliance AI is compliance software for Canadian small and medium-sized businesses. It checks how you handle marketing email and personal information against CASL, PIPEDA and Quebec Law 25, turns the gaps into a prioritized task plan, and keeps the records those laws expect: a 24-month breach register and an audit log you can export. AODA is covered with guidance and a free 2026 report checker.
Canadian businesses that have privacy and anti-spam obligations but no legal or compliance department — for example online stores that send newsletters, agencies and professional firms that hold client contact lists, and clinics that book clients by email.
No software can do that on its own. Compliance depends on what your business actually does. The product helps you find gaps, organize the work to close them and keep evidence of it. It is not legal advice.
Canada Compliance AI is based in Edmonton, Alberta, and serves businesses across Canada. Primary compliance data is hosted in Canada, in the Montréal region.
The free compliance check takes about two minutes. On a paid plan you answer a 15-question self-assessment in plain language, and the platform turns your answers into a readiness score and a prioritized task plan. There is nothing to install.
No. The platform is built for business owners, marketers and the person who ends up responsible for privacy, not developers. You answer questions and work through a task plan in your browser.
Not yet. Mailchimp, HubSpot and Shopify connections are planned for Fall 2026, and there is no public API today. You work from the self-assessment, task plans and tools, and export your records as CSV or PDF.
Yes. Monthly plans have no long-term contract and cancellation takes effect at the end of the billing period. Annual plans can be refunded in full within 30 days of purchase; after that you can turn off auto-renewal and keep access until the end of the term.
CASL (anti-spam), PIPEDA (federal private-sector privacy) and Quebec Law 25 have readiness scoring and task plans. AODA is covered with guidance and a free 2026 accessibility report checker for Ontario organizations.
No. Canada Compliance AI is compliance software, not legal advice. It helps you find gaps, organize the work and keep records. For legal interpretation or a high-risk situation, talk to a lawyer.
British Columbia and Alberta have their own private-sector privacy laws. They are not scored separately in the product today; the PIPEDA assessment covers the shared fair-information principles, and our blog has a guide to Alberta privacy compliance.
No. The product focuses on Canadian federal and provincial rules.
The compliance check is free. Paid plans are Solo at $49, Business at $149 and Team at $249 per month in Canadian dollars, before tax. Every paid plan starts with a 14-day free trial.
Yes, on Solo, Business and Team. Annual plans cost the equivalent of ten monthly payments ($490, $1,490 or $2,490 CAD a year), are billed upfront and lock your rate for 12 months.
Yes. You can manage your subscription from the billing section of your account settings.
Primary compliance data is stored in Canada (Montreal region via Supabase). Some services, such as transactional email and analytics, use US subprocessors. The subprocessors page lists each one.
SOC 2 Type I: In progress (not yet certified). ISO 27001: Planned (2027). Penetration testing: Planned post-launch. Security practices: data encrypted at rest (AES-256) and in transit (TLS) by our infrastructure provider, database row-level security, TOTP two-factor authentication, and Canadian data residency for primary compliance data (live now).
Yes. You can export your breach register, audit log, task plans and reports to CSV and PDF at any time.
Cancelling a plan does not delete your account, so your records stay available to export. If you want your data gone, request account deletion from account settings; there is a 30-day grace period, then your records are deleted as described in the retention section of our privacy policy.
Send us a question and we respond within 24 hours, or book a demo to see the product.