ISMS Copilot for Canadian Compliance Teams
PIPEDA, Loi 25, Alberta and BC PIPA, and OSFI B-13. Built for Canadian teams.
What the Canada Copilot Can Do
PIPEDA Schedule 1 fair information principles, meaningful consent (s. 6.1), and Division 1.1 breach reporting
Quebec Loi 25 (CQLR c. P-39.1): privacy impact assessments, confidentiality incidents, cross-border transfers, and portability
Alberta PIPA (SA 2003, c. P-6.5) and BC PIPA (SBC 2003, c. 63) as their own statutes, not PIPEDA with a flag swap
OSFI Guideline B-13 technology and cyber risk documentation for FRFIs and their vendors
SOC 2 Type I and Type II readiness for Canadian SaaS selling into US and Canadian enterprise
Cross-mapping so one privacy programme covers federal, provincial, and EU customers without two contradictory binders
About ISMS Copilot for Canadian Compliance Teams
ISMS Copilot for Canadian Compliance Teams is the specialist assistant for the privacy and cyber work Canadian organisations actually run: PIPEDA at the federal level, Quebec's Loi 25, Alberta PIPA, BC PIPA, OSFI Guideline B-13 for FRFIs, and SOC 2 for the US and Canadian enterprise buyers who ask for an attestation. Draft the policies, map the principles, and prepare the OPC, CAI, OIPC, or OSFI pack in one workspace.
Who it's for
Canadian SaaS companies
PIPEDA, Loi 25, and SOC 2 for teams selling into Canada and the US.
PIPEDA
Federal private-sector privacy law. Ten fair information principles and the NDB scheme.
Loi 25
Quebec's private-sector privacy statute, including PIAs, incidents, and transfer assessments.
Alberta PIPA
SA 2003, c. P-6.5. Not the same statute as BC PIPA.
BC PIPA
SBC 2003, c. 63. Applies more broadly than PIPEDA's commercial-activity trigger.
OSFI B-13
Technology and cyber risk management for Canadian FRFIs.
Cross-framework mappings
Working across Canada and another standard? ISMS Mappings is a free public directory of control maps (ISO 27001, SOC 2, NIST, GDPR, and more). A Better ISMS tool, separate from the chat assistant.
Browse free mappingsFrequently Asked Questions
Which Canadian frameworks does it support?
Specialist coverage for PIPEDA, Quebec Loi 25, Alberta PIPA, BC PIPA, and OSFI Guideline B-13, plus SOC 2 and ISO 27001. The Copilot is documentation support, not legal advice and not a substitute for Canadian privacy counsel or an OSFI review.
Does Loi 25 replace PIPEDA in Quebec?
For most intra-Quebec private-sector activity, Quebec's Act is deemed substantially similar under PIPEDA s. 26(2)(b), so the CAI is usually the office that matters. Two exceptions stay with PIPEDA: federally regulated works, undertakings and businesses, and inter-provincial or international commercial activity. Multiple statutes can apply to the same organisation. The Copilot keeps both regimes in one workspace. That is not a legal determination.
Where is my data hosted?
Database and document storage live in Frankfurt. AI processing is your choice: Mistral in the EU with zero retention, or Anthropic in the US under standard contractual clauses. See /coverage for the full split.
Ready to do compliance work faster?
Built for speed, accuracy, and audit-ready output.