Geocoding & Routing Built for Canadian Privacy Compliance
Protect sensitive customer, legal, and patient addresses from cross-border surveillance, foreign subpoena laws, and third-party data broker profiling.
Why US-Based Mapping APIs Pose Compliance Risks
Under Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and provincial frameworks like Quebec’s Law 25 and Ontario’s FIPPA/PHIPA, physical addresses, GPS coordinates, and travel routes constitute sensitive Personally Identifiable Information (PII).
When Canadian legal firms, process servers, bailiffs, healthcare providers, or municipal software query foreign APIs (like Google Maps or Mapbox), sensitive citizen addresses cross the border and fall under the jurisdiction of the US CLOUD Act. Under US law, foreign intelligence agencies can compel US tech companies to produce data without notice to the Canadian custodian.
100% In-Canada Data Residency
All servers, databases, and geocoding engines run exclusively on bare-metal infrastructure located in Beauharnois, Quebec, Canada. We explicitly prohibit foreign CDN proxies that route Canadian request data outside the country.
Strict Zero-Request-Logging
Nginx access logging is disabled (`/dev/null`). Upstream HTTP client failures are sanitized to eliminate URLs from logs. Address queries, coordinates, and request payloads are never written to disk, caches, or persistent storage.
Anonymous Counter-Only Billing
Usage is tracked solely as anonymous integer counters per API key per calendar day (e.g., "Key #12: 154 lookups on Nov 10"). We never retain or reconstruct what was searched or when specific addresses were looked up.
Signed Data Processing Agreements (DPA)
We provide standardized Canadian Data Processing Agreements committing contractually to zero request logging, exclusive Canadian hosting, and strict breach notification protocols.
Ephemeral Bulk Lookups
For asynchronous CSV/JSON batch geocoding, uploaded data and results are encrypted at rest with a dedicated server key (`GEO_BATCH_KEY`) and automatically shredded from the filesystem within 72 hours of completion (or immediately upon customer deletion).
Ensure your software meets Canadian privacy standards
Review our complete Privacy Policy and Data-Processing Agreement.