Skip to main content
For teams in Canada · updated 2026-10-12

What changes when you buy from Canada

AODA website compliance audits at WCAG 2.0 AA, EN 301 549 for federal procurement, automated regression and API testing, and security scans with evidence. Transfer terms for PIPEDA and Quebec Law 25; French product interface.

The laws a testing buyer in Canada has to satisfy

Checked on 2026-10-12: 4 of 4 read at the statute, regulator or government page; the rest from law-firm or practitioner summaries, marked as such. A law changes; this table carries the date so you can tell when it needs re-checking.

Laws and standards for Canada (checked 2026-10-12)
Law or standardWhat it requires of youStatus as checkedSource read
Accessibility for Ontarians with Disabilities Act (AODA) and the Integrated Accessibility Standards RegulationPublic sector organisations and private organisations with fifty or more employees must make websites and web content conform to WCAG 2.0 Level AA, other than live captions and pre-recorded audio descriptions.Full WCAG 2.0 AA requirement in force since 1 January 2021; Ontario guidance updated 21 September 2026.www.ontario.caprimary source
Accessible Canada Act and CAN/ASC-EN 301 549:2024Federally regulated entities work towards a barrier-free Canada; the Canadian adoption of EN 301 549 carries the ICT accessibility requirements, including WCAG 2.1 AA for web content.The Act sets 1 January 2040 as the barrier-free date; the standard was adopted by Accessibility Standards Canada in 2024 (adoption date reported by secondary sources).laws-lois.justice.gc.caprimary source
PIPEDA, and Bill C-36 (Personal Privacy and Consumer Data Act)Accountability for personal information transferred to a processor outside Canada through contractual means; a successor statute is before Parliament.PIPEDA current to 21 September 2026. Bill C-27 died at prorogation on 6 January 2025; Bill C-36 had its first reading on 15 June 2026 and is at second reading.www.parl.caprimary source
Quebec Law 25 (Act to modernize legislative provisions as regards the protection of personal information)A privacy impact assessment before personal information is communicated outside Quebec, among the staged obligations.In force in stages: 22 September 2022, 22 September 2023, and 22 September 2024 (data portability).www.cai.gouv.qc.caprimary source

Where your data goes, and what covers it

Customer data is hosted in Mumbai, India. The Data Processing Addendum plus a comparable-level-of-protection clause covers the PIPEDA transfer; Quebec organisations complete a privacy impact assessment on their side before the transfer, and we supply the processor facts it needs.

The full table of instruments by regime is section 5 of the Data Processing Addendum; the current state of every certification we do and do not hold is on the trust centre.

The accessibility target for Canada

WCAG 2.0 AA for the AODA, WCAG 2.1 AA through EN 301 549 for federal procurement. The audit is run at the level your regime names and runs against WCAG 2.2, which contains both.

Audits map findings to sixty-six country standards and export a conformance report; how the accessibility module works.

The words Canada uses for the need, mapped

The same job has a different name in every market, and sometimes the honest answer is that the name describes a service we are not.

AODA website compliance, AODA audit, WCAG 2.0 AA audit

Audits selectable at WCAG 2.0 AA with a conformance report; the same scan reports 2.1 and 2.2 criteria for federal work.

Accessibility audits

Test automation tools Canada

Record once in a real browser, heal with a person in the loop, export to Playwright or Selenium.

Test recorder

Law 25 compliance, PIPEDA compliance

Processor terms in the addendum, and synthetic test data so staging holds no personal information.

Data Processing Addendum

Penetration testing Canada

OWASP scans and authorised exploitation against targets whose ownership is proven; a tool, not a testing-services firm.

Security testing

Automatisation des tests, test d’intrusion, audit d’accessibilité

The product interface is available in French; this site’s French edition is planned and will appear under its own prefix once reviewed.

Every module

Billing and support hours

Prices are quoted in US dollars on every plan, before any tax your jurisdiction applies to imported software services. Self-serve plans are paid by card; Enterprise agreements are invoiced. If procurement needs a quotation with your tax identifiers, ask through the contact form (topic: billing).

Toronto and Montreal are 9.5 hours behind Indian Standard Time (10.5 hours in winter); Vancouver is 12.5 hours behind (13.5 in winter). Response targets by plan are on the service levels page.

Plans and caps are on the pricing page; response targets by plan are on the service levels page.

Questions teams in Canada ask

Does the audit report cover the AODA’s WCAG 2.0 AA?

Yes. You select the level the regime names; the report states conformance at WCAG 2.0 AA while the same scan also records the 2.1 and 2.2 criteria, so a federal EN 301 549 question is answered from the same run.

Is the product available in French?

The product interface is, as one of its twenty-one languages. This marketing site’s French edition is planned and will be published under its own prefix only once a reviewer has approved it.

What does Quebec Law 25 require before we send data to you?

A privacy impact assessment on your side for personal information communicated outside Quebec. The Data Processing Addendum gives you the processor facts it needs: what we process, where, with which safeguards, and the sub-processors involved.

Next step

Start on the Free plan, or bring one flow from your own product and we record it live.

Your choice about analytics

We use one optional analytics tool, run on our own servers, to see which pages help people. It stays off unless you turn it on. Storage needed to sign you in, keep the site secure and remember this choice is always on. Cookie Policy