Security and data
This isn't “some data” sitting on a server. It's everything that answers for you the day someone starts asking questions.
Here is where your files live, how they are encrypted, how long they are kept, who can see them, and what you take with you when you leave. In black and white.
Where your data lives
OnlineOne country, one city for your files. Kept where your obligations apply.
Where your data lives
Your files, your clients' documents and the backups all live in a data centre in Montreal. Not “somewhere in North America”. In Montreal, Quebec. That's where your obligations apply.
We don't sell Canadian residency to you as an advantage. It's a prerequisite of your profession. Three laws make it an obligation, not an option.
Law 25
Quebec law governs your clients' personal information and its movement outside the province. Keeping it in Canada is one less thing to justify.
AMF
As a registered broker, you answer for the protection of the information you hold. Canadian residency makes that accountability easier.
FINTRAC
Your records must be kept and provided on request. Keeping them in the country means they're ready the day of an examination.
The objection we hear
It's a fair worry. Many of the tools you use every day host your information on American servers, under foreign laws. Most will never tell you where your data lives. For your clients' documents, moving them out of the province isn't a detail: it is exactly what Law 25 governs.
At Hypora, your files are hosted in Montreal and stay there. This isn't an empty promise: it's the real address of our data centre, shown to you in black and white.
What about automated document analysis?
Storage doesn't move: your files are kept in Montreal. If you use automated preparation, an extract of the document is sent to a subprocessor for analysis, then deleted within 30 days at most. That analysis may take place outside Canada, only for the duration of processing, with your client's consent, and you validate every field. The full assessment (Law 25) is published in black and white.
Read the assessment on the Trust pageHypora keeps and timestamps the organized record of your work. You remain the reporting entity and the sole party responsible for your compliance under PCMLTFA s. 9.6. Keeping the trail in Canada means having it ready the day you're asked for it.
From photo to vault
Follow a document, from the moment your client photographs it to the moment it's stored. Every step is calm, predictable, and there's nothing for you to handle by hand.
01
The photo arrives
02
Encrypted instantly
03
Stored in the vault
04
Kept for five years
Your client photographs their document from their phone. It goes straight into the right file.
On upload, the document is encrypted, in transit and at rest. It never travels in the clear.
It files itself into the client's record, dated, in Montreal. You find it again in seconds.
The document stays for as long as the law requires. The day of an examination, your file is already ready.
That's the Vault: your documents aren't just stored, they're kept for five years by default, dated, in Canada. No housekeeping to do, no document vanishing because you switched systems.
Who sees what
Your client sees their portal. You see your files. No other broker, no other client, nobody else. The separation sits at the core of the system, not just in what's displayed.
Isolated per broker
Your files are yours alone: every request is scoped to your account, by construction.
The portal stays walled off
Your client only ever reaches their own portal, just long enough to send you their documents. Nothing more.
Nobody else, full stop
Not another broker, not another client, no one without a reason to see a file. You, your clients for their own documents, and that's it.
Client portal
What your client sees
Your files
What you see
Nobody else has access. Not another broker, not another client.
Take back all your data
An organized archive, ready to take elsewhere. You download it; it is yours.
If you leave
You walk away with all of your files, your documents and your records, as a single structured archive, at any time, without asking us. You're taking back your own data: this is not a transfer to a third party.
You never depend on us to keep what is yours. The full export exists today, you can verify it from your very first file, and it asks no permission.
Full export, at any time. Zero lock-in.
Submit your application and see exactly where your data lives, how it's encrypted, and what you take with you if you leave.