Every byte of Agreement Data — documents, signers, audit events, brand assets, attachments — lives in Supabase's AWS ca-central-1 / Montréal project. No multi-region replication, no US warm standby, no global pod failover that quietly routes signer PII through Virginia.
CA-CENTRAL-1 · MONTRÉALBuilt to PIPEDA at the federal level and Quebec Law 25 at the provincial level — both regimes assume Canadian residency. The signed-PDF audit cert calls out the alignment so the recipient sees it without having to ask.
PIPEDA · LAW 25 · UECA · CEA §30Postgres Row-Level Security gates every row by tenant membership at the database, not the app. Cross-device signing links carry an HMAC v2 token bound to a single signer and verified with a timing-safe equality check. Every signed PDF carries dual SHA-256.
RLS · HMAC V2 · AES-256 · TLS 1.2+Receive a copy of the personal information we hold about you, in machine-readable form. We respond within 30 days.
Update inaccurate or incomplete personal information through the workspace UI or by request.
Where consent is the legal basis, withdraw it on reasonable notice. Processing stops within the same window.
Request workspace deletion. We hold a 90-day re-activation window, then purge on request or on our next scheduled pass.
Download each signed PDF (with its embedded cert) from the workspace. Workspace-level export scoped by written request.
Lodge a complaint with the OPC of Canada or the Commission d'accès à l'information du Québec.
Not for product development. Not for sales. Not for analytics. Not for model training. Not for "QA." And not out of curiosity. Ink. personnel will not view, read, search, copy, or export the contents of your Agreement Data in the ordinary course of operating the Service.
11 sections covering collection, use, location, retention, rights, our access commitment, security, and contact. PIPEDA + Quebec Law 25 aligned.
INKSIGN.CA/PRIVACY →15 sections. §08 is the contractually-binding version of "we don't read your documents." BC governing law. Lol cap = 12 months of fees.
INKSIGN.CA/TERMS →Customer-facing Q&A in DocuSign's published format, but written for our smaller-Canadian-platform reality. Best as the hand-to-IT brief.
INKSIGN.CA/TRUST/DATA-MGMT-PRIVACY →Why every Ink-signed PDF holds up in court. The Cryptographic Triangle of Admissibility, the audit cert structure, the three challenges and how the ledger answers them.
INKSIGN.CA/SECURITY →