Security, residency, compliance
Built for the regulator who will audit you.
Canadian data stays in Canada. PII is scrubbed before a US model sees it. Every AI output is stamped DRAFT. Every run is logged to an append-only table. These are not settings. They are the defaults.
Four guarantees
What you get by default.
01
ca-central-1 by default
All customer data — Postgres, Redis, Meilisearch, object storage, audit log — lives in Montreal. US-region LLM calls are opt-in per firm with consent and audit trail.
02
21-field PII scrubber
Full name, DOB, passport, SIN, UCI, address, phone, email, IP, NoK, employer, bank account, CRA BN, health card, licence, child/spouse/parent names, file number, GCKey, medical record. All scrubbed before any non-CA model call.
03
DRAFT stamp + CICC disclaimer
Non-dismissable on every AI output. Stitched into metadata so it survives export. CICC §8.1 disclaimer auto-inserted. The regulator has nothing to flag.
04
Append-only audit log
Partitioned by month. UPDATE and DELETE denied at the database level. Every tool run recorded: firm, user, tool, inputs, outputs, model, tokens, timestamp. Retention 7+10 years.
PII scrubbing, visually.
Paste a refusal letter. Watch 21 field types resolve to tagged placeholders before the text leaves the router. Extractions stay in your browser so the final rendered output can be rehydrated client-side — no PII round-trip to a US model.
What you paste
Dear Officer, My client Pritam Singh (UCI 8821-4477) was refused on 2026-01-14 per section R216(1)(b). His passport G8741229 was issued in New Delhi. He can be reached at +1-647-555-0144 or pritam.singh@example.com. He currently resides at 1450 Bathurst St, Toronto ON M5R 3H8 with his spouse Amanpreet Kaur. His SIN is 412-884-009.
What the LLM sees
Dear Officer, My client Pritam Singh (UCI 8821-4477) was refused on 2026-01-14 per section R216(1)(b). His passport G8741229 was issued in New Delhi. He can be reached at +1-647-555-0144 or pritam.singh@example.com. He currently resides at 1450 Bathurst St, Toronto ON M5R 3H8 with his spouse Amanpreet Kaur. His SIN is 412-884-009.
Scrubbing runs in the router before any US-region model is called. Extractions stay in your browser session so the final output can be re-hydrated client-side.
The DRAFT stamp is not a setting.
Every AI-generated output ships with the DRAFT · FOR RCIC REVIEW stamp, the CICC §8.1 disclaimer, and the generated-at timestamp. Exporting the draft carries all three with it. You cannot accidentally send an un-reviewed letter.
Statement of Purpose — Master of Data Science, UBC
My decision to pursue the Master of Data Science at the University of British Columbia is not a pivot. It is a continuation of a trajectory that began in my second undergraduate year, when I built a recommendation system for the campus library and
Weak spots flagged · Program rationale could name two UBC faculty. Financial ties paragraph omits spouse income.
Need a SOC 2 report or DPA?
SOC 2 Type II audit is in progress (target Q3 2026). Pre-audit controls and our DPA are available under NDA. Email security@anyimmi.com with your company and we'll send the package within one business day.