Privacy and data residency
MapleFile is designed to Canadian privacy law: PIPEDA, Quebec Law 25, Alberta and BC PIPA, and the confidentiality rules of the Income Tax Act. Here is what that means in plain language.
Everything stays in Canada
Database, backups, logs and any AI processing run in Canadian regions. Sub-processors outside Canada are blocked by default and the current list is published here.
Built-in safeguards
Row-level access rules, masked SIN and business numbers, an immutable audit trail on every sensitive read, short idle sessions and encrypted backups with a 7-year retention clock.
AI you can audit
AI is assistive only. Personal identifiers are replaced with tokens before anything leaves the app, every AI output is badged and reviewable by a human, and you can opt out per file.
Your rights
Download your data, correct it, ask who accessed your file, withdraw AI consent, or ask us to delete what the Income Tax Act does not require us to keep.
Privacy officer, sub-processor list, breach register and privacy impact assessments live in the admin privacy settings, added later in the build.