Skip to main content
Compliance & Security

Canadian data residency. Protected B-aligned controls.

ProposalForge is built in Canada with in-country data residency and governance controls to support Protected B workflows. These are technical and operational safeguards; ProposalForge is not formally authorized or certified as a Protected B system.

Canadian data residency
In-country storage
Access controls
Role-based permissions
Audit trails
Change history
Protected B-aligned controls
Configurable safeguards
Data Residency

Canada-first Architecture

Keep proposal data and AI processing in Canada to support Protected B-aligned workflows.

Data Storage in Canada

Proposals and assets
  • In-country storage options
  • Controlled access and retention
Designed for Canadian data residency needs

AI Processing in Canada

In-country inference
  • In-region AI workloads
  • AI inference runs in Montreal
Supports Protected B-aligned requirements
Protected B alignment

Designed for Canadian
Government Workflows

ProposalForge is built in Canada with controls that support regulated proposal workflows.

Role-based access

Permissions and approvals by role

Audit logging

Change history across proposals and assets

Data isolation

Private storage buckets and row-level controls

Retention you control

Audit records are kept in the Canadian database for at least one year, a floor the database enforces. An administrator can set a longer default period.

Compliance Guidance

Policy Alignment

We provide controls that can be configured to align with your internal policies and procurement requirements.

Canadian Data Residency

Data storage and AI processing can remain in Canada to support Protected B-aligned workflows.

Security Review Support

Our trust page lists the controls, subprocessors and data flows, and is where to request the full evidence pack.

Visit the trust page

Audit retention

Create, update, delete, export, approval, settings, access-control and multi-factor authentication events are recorded. Audit records are kept in the Canadian database for at least one year, a floor the database enforces, and an administrator can set a longer default period.

Made in Canada
Security

Security Practices

Controls and safeguards designed for regulated proposal workflows.

Encryption

Encryption in transit and at rest where supported by the deployment.

Access Controls

Role-based permissions, approvals, and access reviews.

Audit Trails

Record actions and changes for oversight and review.

Data Residency

Canadian data residency options for storage and processing.

Operational Controls

Change management and release oversight practices.

Security Reviews

Evidence pack, control matrix and questionnaires: start on the trust page.

Support and service status

Support runs on business hours, weekdays 9:00 to 17:00 Eastern excluding Ontario statutory holidays, with response targets by plan and priority and escalation to the ProposalForge support owner at 75 percent of the target. Availability is probed every minute from Google Cloud in Montreal and published live.

Support tickets are opened and answered through the in-app and web support forms, and are stored in Canada; inbound support email is not enabled. Ticket notifications go out through Resend (United States), the subprocessor used for notification email, with fixed text and a link back to ProposalForge, never the message, its attachments or proposal content.

Start free

Questions About Compliance?

Our team can help you map ProposalForge controls to your compliance requirements.

✓ 🍁 Fully Canadian-owned✓ Customer content stored in Canada✓ Protected B-aligned controls
Compliance & Data Residency | ProposalForge