Loi 25
Data protection (Quebec)
Responsibility
Sobriety, equity, governance.
What Northken commits to. Three categories — environmental, social, operational — and what we don't claim.
WCAG 2.1
Accessibility (level AA targeted)
CA-QC
Primary jurisdiction
Measurable
All commitment is verifiable
Environmental responsibility.
Operational sobriety
Shared services are operated with particular attention to consumption. No oversized servers, no unnecessary calculations, no boundless caches. Sobriety is a system property, not a slogan.
No cryptoassets
Northken does not operate any crypto assets, offer any crypto products, or hold any crypto exposure. The operational scope excludes this sector by choice.
Sober accommodation
The services are hosted on existing infrastructures. No dedicated data center, no clean energy claimed without an auditable supplier.
Life cycle
Software dependencies are tracked, updated, and deprecated when necessary. Technical debt is documented, not hidden.
Social responsibility.
Accessibility
WCAG 2.1 level AA practices targeted on public surfaces. The interfaces are tested on the keyboard, the contrasts are checked, the textual alternatives are present.
Multilingualism
FR and EN on public surfaces. Additional jurisdictions are addressed via legal bands and local constraints.
No invasive surveillance
No third-party trackers for advertising purposes, no advertising profiling, no resale of data. Northken advertising is editorial or void.
Fair recruitment
Documented and proportionate process. No sorting algorithms, no arbitrary test batteries. The feedback is explicit.
Operational responsibility.
Continuity
Shared services have documented return paths. Migrations preserve existing data. The operations do not break the existing one by default.
Transparency
Observable characteristics are public. The precise financial commitments remain confidential (private company) but the technical commitments are verifiable.
Chain of evidence
When Northken asserts a characteristic, the observable element that supports it remains accessible. A statement without observable evidence is not public.
Security Disclosure
Public channel (security.txt), coordinated window, identified contact. Incidents are communicated according to a documented policy.
What we do not claim.
We do not claim carbon neutrality without an auditable supplier. We do not claim parity without measurable data. We do not claim certifications that we have not obtained. Responsibility that cannot be measured is not claimed.