Loi 25
Data protection (Quebec)
Standards
Public standards. No opaque promises.
Northken operates its products according to identifiable standards. The frameworks we follow are public; effective coverage is verifiable.
PIPEDA
Canadian federal law
WCAG 2.1
Accessibility (level AA targeted)
OWASP
Top 10 — security practices
Compliance areas.
Data protection
Law 25 of Quebec, PIPEDA in Canada. Minimal collection, explicit purposes, limited retention, effective right of access and rectification.
Accessibility
WCAG 2.1 level AA practices targeted. Keyboard tested interfaces, checked contrasts, text alternatives for media.
Application security
OWASP Top 10 Practices. Explicit authentication, input validation, monitored dependencies, access logging.
Operation
Targeted deployments, verified backups, tested recovery, shared services monitoring, documented return paths.
Content
Explicit versioning, approvals, published states. Managed content remains traceable from modification to publication.
Communication
Public reporting channel (security.txt), responsible identified, coordinated disclosure window.
What this means in practice.
Standards are not slogans. When a product operated by Northken touches personal data, the Law 25 + PIPEDA commitment applies. When a user flow exposes an interface, accessibility is tested before publication. When a change affects a shared service, the deployment is traceable and reversible. Exceptions are documented, not hidden.
Check a precise standard.
For a targeted audit, a certificate or details on a specific area.
Contact us