Audit & Security

Canadian data residency

All application data, documents and backups are proposed to reside in Canadian regions (Canada Central with Canada East failover). No data leaves Canada in the proposed architecture.

Encryption

AES-256 encryption at rest for database, object storage and backups; customer-managed keys supported with periodic rotation.

TLS 1.2+ in transit

All public and integration traffic is served over TLS 1.2 or higher with modern cipher suites and HSTS enabled.

Entra ID, MFA and RBAC

Staff authenticate with Microsoft Entra ID single sign-on and multi-factor authentication. Role-based access control governs module, record and field permissions.

Comprehensive audit logging

Append-only logs capture authentication, record access, changes, evidence views, exports and administrative configuration, retained for seven years.

Backup and recovery

Hourly incremental and nightly full backups with point-in-time recovery. Target RPO 1 hour, RTO 4 hours; restores tested quarterly.

Monitoring and alerting

Continuous availability, performance and security monitoring with alerting to a 24/7 on-call rotation and a status page for stakeholders.

Staging and UAT environments

Separate development, staging and UAT environments with anonymized data and a controlled release path into production.

Data export and portability

Administrators can export the full dataset and documents in open formats on request, supporting FOI responses and exit transition.

Secure destruction

Retention schedules drive certified destruction of records and media, with destruction certificates recorded in the audit log.