Security & Compliance

Our site is built to work for everyone — including people who use screen readers, keyboard navigation, or other assistive technology. We test with real tools like NVDA and VoiceOver, support 10 languages including RTL scripts, and meet the internationally recognized AA standard for accessibility.

We follow Canada's federal privacy law. We don't collect personal data without your consent, we don't use advertising trackers, and we don't sell or share your information. Support requests are deleted after 90 days.

We protect against all 10 categories of the most common web attacks — including injection, cross-site scripting, and session hijacking. All connections are encrypted, all forms are protected, and a web application firewall monitors for threats.

Our pages pass W3C validation, use structured data so search engines understand our content, and are built mobile-first so they work on any device from a phone to a desktop.

We follow SOC 2 principles for how we manage our servers and code. Hosted in Canada, fully encrypted, automatically monitored, and continuously tested with 900+ automated checks.