Where your data lives, and what the agents may do on their own.

Data residency

Customer data is stored in Canadian data centres. Backups stay in Canada. If a specific service you ask us to connect stores data elsewhere, we tell you before it is switched on.

Security

• Encryption in transit and at rest.
• Role-based access, so staff only see what their role needs.
• An audit log of every AI action: what it did, when, and on whose behalf.
• Single sign-on available on Growth plans and above.
• Regular backups and a documented restore process.
• Incident response: we notify affected customers promptly and in writing.

Privacy

• Aligned with PIPEDA, Canada's federal private-sector privacy law.
• Québec Law 25: named privacy contact, consent records, and notices where an automated process contributes to a decision about a person.
• Health information is handled in line with PHIPA and provincial equivalents, under a signed agreement with each health-care customer.
• People can ask what is held about them, and we help you answer those requests.

Responsible AI

• A human stays in the loop for any decision that needs judgment.
• We do not train shared models on your data without your written consent.
• Anyone in a conversation can ask for a person, and the agent hands over.
• When an agent gets something wrong, the log shows what happened and we correct the record.

Sub-processors

We keep a current list of the services that process customer data on our behalf, with what each one is used for. Ask us and we send the current list with your agreement.

Security contact

Report a security concern to info@movas.ca or by WhatsApp at +1 416-388-1724. We acknowledge security reports within one business day.