Security & Privacy

How We Protect Your Clients' Files

Immigration files hold some of the most personal information there is. Here is, in plain words, where that information lives, who can see it, and how it is protected.

Stored in Canada

  • Client records, case files and uploaded documents are stored in Canada (Central Canada data region).
  • Our business email is hosted by a Canadian provider.
  • Contact-form messages are stored in Canada. The alert email we receive about a new message contains no personal details.
  • This website is delivered through Cloudflare's network; it does not hold client files.

Who can see a file

  • Each firm sees only its own cases and documents. The database enforces this, not just the screen.
  • Our staff sign in with a password and a 2-step code (two-factor authentication). Without the code, the database shows them nothing.
  • Only administrators can approve new client accounts or add staff.
  • Staff actions on files are recorded in an activity log.

Encryption

  • Every connection uses HTTPS encryption, and browsers are told to always use it.
  • The database and file storage are encrypted at rest (AES-256) by our infrastructure provider.
  • Documents are downloaded through private links that expire within minutes.

Accounts & passwords

  • Passwords must be at least 12 characters and mix upper- and lower-case letters, numbers and symbols.
  • New staff passwords are checked against lists of known leaked passwords, without sending the password anywhere.
  • Staff portal sessions end automatically after a period of inactivity.

This website

  • No advertising or Google tracking. Fonts are served from our own site.
  • Visitor statistics use Cloudflare Web Analytics, which does not use cookies.
  • Pages only run code from our own site and Cloudflare's statistics script (a Content Security Policy blocks anything else).

Our role

  • We are a non-regulated support company. Your licensed RCIC or lawyer reviews and signs off every file.
  • We work only from your data sheet and written instructions.

What we never do

  • ✕Sell, rent or share client information
  • ✕Use client data for marketing
  • ✕Give immigration advice or contact IRCC for a client
  • ✕Put client details in notification emails

Questions about security, or need details for your own compliance file? Email contact@anyhelp.ca. Our full privacy policy explains how we handle personal information.

Talk to us