Data Security and Privacy

• Data hosted on secure cloud infrastructure located in Montreal, Canada (northamerica-northeast1 region)
• AI processing (dimension extraction) also performed in Montreal (Google Vertex AI) — your data never leaves Canada
• Vertex AI chosen for its performance and enterprise commitment: your data is never used to train models (Google Cloud contractual commitment). In case of a major outage, backup failover on anonymized data only
• Hosting compliant with Quebec and Canadian data localization requirements
• Strict data isolation between each client company
• Access limited to authorized users according to their roles
• Data encryption in transit and at rest according to industry standards
• Tamper-proof audit trail: every sensitive action is logged in a hash-chained, tamper-evident registry
• Hosting infrastructure certified SOC 2 and ISO 27001/27017/27018 (Google Cloud)
• Regular backups with controlled recovery mechanisms

Astérion Solutions Inc. applies principles and obligations from:

• Quebec's Law 25 on the protection of personal information
• Applicable Canadian laws on privacy and data protection

These principles include:

• Limiting access to information
• Protection against unauthorized access
• Secure data storage
• Respect for the rights of individuals and organizations

Each client company has a separate data space guaranteeing:

• No interconnection between organizations
• No cross-access possible
• Strict logical separation of environments

We rely on recognized technical sub-processors, bound by the same confidentiality obligations:

• Google Cloud / Firebase — hosting, storage and AI processing (Vertex AI), Montreal region (Canada). Infrastructure certified SOC 2 and ISO 27001/27017/27018
• Stripe — secure payment processing (no card data stored on our servers)
• Backup AI services (outside Canada) — used only if the Canadian service is unavailable, on anonymized technical data, with no retention or model training

Data remains the exclusive property of your company. Astérion Solutions Inc. acts only as a technical custodian.

You have the following rights:

• Access and consultation via the application
• Modification and rectification
• Data export on request
• Data deletion according to contractual terms