Does PIPEDA allow us to send personal data to India?

Yes, PIPEDA allows the transfer, and you remain accountable for the data as the organisation transferring it. Our data processing agreement gives comparable protection contractually and names every sub-processor, which gives that accountability a written basis. Canadian data residency is available and fixed at contract where you would rather the data not leave.

Can you support a Quebec Law 25 privacy impact assessment?

Yes, we supply the inputs a Law 25 privacy impact assessment requires. Those are processing purposes, data categories, retention periods, the full sub-processor list, our security controls, and the ISO 27001:2022 certificate number for independent verification. You complete and sign the assessment itself.

Can you meet Quebec's French-language requirements?

We can build to Quebec's French-language requirements; whether a product complies is a legal determination for your counsel. Under the Charter of the French Language as amended by Bill 96, commercial software and public-facing interfaces offered in Quebec generally have to be available in French on terms at least as favourable as any other language. In practice French cannot be a later phase: it shapes the content model, the QA matrix and the release process from the start, and French must ship at the same time as English. Quebec French is also not interchangeable with European French, so authorship comes from a Quebec-based specialist named in the engagement.

Canada · Global delivery09:00–12:30 ET (shifted)CAD or USD

Engineering for Canadian companies.

PIPEDA and Quebec's Law 25 make privacy impact assessments and explicit transfer disclosure a normal part of a supplier conversation in Canada, and our answers already exist as documents. The time zone is the harder part. We cover it with engineers who work a shifted day to match your morning.

Start a project Verify our certifications

Working with Canada

Hours, money,
and paperwork.

The three things that decide whether a cross-border engagement works. Everything here is specific to Canada.

Time overlap

09:00–12:30 ET (shifted)

Eastern Canada is ten and a half hours behind IST on standard time, which means a normal Indian day, 10:00 to 18:00 IST, runs 23:30 to 07:30 ET and does not overlap your working day at all. The 09:00–12:30 ET window exists because engineers assigned to your engagement work a shifted day at 19:30–23:00 IST, or 18:30–22:00 IST while Canadian clocks are on daylight saving time, and that shift is named in the engagement. Vancouver teams take the same window at 06:00–09:30 PT. Written reporting carries everything outside it.

Currency and tax

CAD or USD

Quoted and invoiced in Canadian or US dollars. Indian GST is not levied on exported services, so it never appears on your invoice, and as a non-resident supplier we charge neither GST/HST nor QST. Self-assessment applies on your side where relevant.

Data protection

Governing law: PIPEDA, and Quebec's Law 25 where applicable
Authority: Office of the Privacy Commissioner of Canada, and the Commission d'accès à l'information du Québec
Our role: Processor, on your instructions
Named sub-processors, written consent before any addition.

We process on your instructions under a data processing agreement naming every sub-processor. PIPEDA requires you to remain accountable for data transferred to a processor abroad, so the agreement gives you comparable protection contractually. Where Quebec's Law 25 applies, we support your privacy impact assessment for the transfer and accept the disclosure obligations that come with it. Canadian data residency is available and fixed at contract.

City by city

Local hours and
local rules.

The shared working window in local time, and any rule that applies in a city on top of the national ones.

Toronto
Ontario
09:00–12:30 ET
Eastern Time
PIPEDA governs private-sector personal information in Ontario. Personal health information falls under Ontario's Personal Health Information Protection Act (PHIPA).
Ottawa
Ontario
09:00–12:30 ET
Eastern Time
Federal institutions are covered by the Privacy Act rather than PIPEDA. Contracts involving protected or classified information need clearance through the federal Contract Security Program, which we do not hold.
Montreal
Quebec
09:00–12:30 ET
Eastern Time
Quebec's Law 25 requires a privacy impact assessment before personal information is communicated outside Quebec. The Charter of the French language, as amended by Bill 96, can also require French versions of contracts and interfaces.
Calgary
Alberta
07:00–10:30 MT
Mountain Time
Alberta's Personal Information Protection Act applies to private-sector organisations in the province in place of PIPEDA.
Vancouver
British Columbia
06:00–09:30 PT
Pacific Time
British Columbia's Personal Information Protection Act applies to private-sector organisations in the province in place of PIPEDA.
Edmonton
Alberta
07:00–10:30 MT
Mountain Time
Alberta's Personal Information Protection Act applies, as in Calgary.
Quebec City
Quebec
09:00–12:30 ET
Eastern Time
Law 25 and the Charter of the French language apply, as in Montreal.
Waterloo
Ontario
09:00–12:30 ET
Eastern Time
National rules apply, with no city-specific additions.
Winnipeg
Manitoba
08:00–11:30 CT
Central Time
National rules apply, with no city-specific additions.
Halifax
Nova Scotia
10:00–13:30 AT
Atlantic Time
National rules apply, with no city-specific additions.

What your procurement will ask

Answered
before you ask.

The questions procurement teams in Canada typically ask, with our answers. Where we do not hold something, the answer says so.

Transfer accountability under PIPEDA

Handled contractually. You remain accountable for data you transfer to us, so the DPA gives comparable protection in writing and names every sub-processor.

Law 25 privacy impact assessment

We supply what the assessment needs: processing purposes, categories, retention, sub-processor list, security controls and the ISO 27001 certificate number. You complete the assessment using those inputs.

Canadian data residency

Available. Canadian cloud regions are supported and residency is written into the agreement.

Bilingual interfaces

French and English interfaces share one bilingual content model with locale-aware formatting. French copywriting is commissioned from a specialist named in the engagement.

Certificate numbers, accreditation status and the verification route are published on our trust page. Check them without asking us.

Work we take on in Canada

Common problems
we build for.

Common work for teams in Canada. If one of these is yours, send us a brief.

Platform modernisation with a compliance trail

Systems that must keep running while they change, in sectors where the audit trail is part of the deliverable. Decision records and change control are standard.

Applied AI with explainability

Model-backed features that legal will sign off because outputs cite their sources and an evaluation harness existed before rollout.

Artificial Intelligence

Embedded engineering capacity

A Canadian lead who needs more engineers than headcount allows, with the same named people in the repository throughout.

Dedicated engineers

Why we suit teams in Canada

The PIPEDA transfer-accountability question answered in the contract, and Law 25 assessment inputs supplied up front.
ISO 27001 with a verifiable certificate number, and ISO 20000-1 for the service management side once the software is live.
Bilingual delivery treated as an architectural decision from the start of design.

Where we are not the right answer

We have no Canadian entity or office, and no standing on federal or provincial procurement vehicles. Your working day and ours do not naturally intersect, so the three and a half hour window depends on engineers working a shifted evening in India, and the rest of your day runs on written reporting. French content is authored by a Quebec-based specialist we commission; we build the bilingual system that carries it.

Canada · Questions

Asked from
Canada.

General questions about pricing, process, IP and security are answered on the FAQ page.

Does PIPEDA allow us to send personal data to India?: Yes, PIPEDA allows the transfer, and you remain accountable for the data as the organisation transferring it. Our data processing agreement gives comparable protection contractually and names every sub-processor, which gives that accountability a written basis. Canadian data residency is available and fixed at contract where you would rather the data not leave.
Can you support a Quebec Law 25 privacy impact assessment?: Yes, we supply the inputs a Law 25 privacy impact assessment requires. Those are processing purposes, data categories, retention periods, the full sub-processor list, our security controls, and the ISO 27001:2022 certificate number for independent verification. You complete and sign the assessment itself.
Can you meet Quebec's French-language requirements?: We can build to Quebec's French-language requirements; whether a product complies is a legal determination for your counsel. Under the Charter of the French Language as amended by Bill 96, commercial software and public-facing interfaces offered in Quebec generally have to be available in French on terms at least as favourable as any other language. In practice French cannot be a later phase: it shapes the content model, the QA matrix and the release process from the start, and French must ship at the same time as English. Quebec French is also not interchangeable with European French, so authorship comes from a Quebec-based specialist named in the engagement.

Other markets