Compliance
Privacy obligations, implemented — not just filed.
Privacy-compliance operations: data maps, consent flows, retention rules, and policy upkeep implemented in your actual stack — built for Québec's Law 25 reality.
What we usually find
Privacy law assumes operational practices most small businesses never set up. The policy got copied from a template, consent lives in a checkbox nobody wired to anything, and nobody can say what data lives where. The exposure grows quietly until a complaint, a breach, or an audit makes it loud.
How we work
Map the data
What's collected, where it lives, who touches it, how long it's kept — the inventory every obligation starts from.
Wire the consent
Consent and unsubscribe flows implemented in your forms, CRM, and email — matching what the policy promises.
Automate retention
Keep-and-delete rules that actually run, so data expires on schedule instead of accumulating forever.
Keep it current
Policies, registers, and practices reviewed on a cadence as tools and laws change. Implementation, not legal advice — we pair with your counsel where opinions are needed.
Sub-services
Delivered through AI orchestration plus our curated expert network for specialized execution.
- Data mapping
- Consent flow implementation
- CASL-compliant email settings
- Retention & deletion automation
- Privacy policy upkeep
- Incident register
Deliverables
- Data map
- Consent flows, live
- Retention automation
- Policy set, current
- Quarterly compliance review
Who this is for
- Québec businesses facing Law 25
- Anyone collecting customer data without a data map
- Teams running on template policies