Data governance
CivilProposal is operated by Lifesaver Technology Services Inc., a British Columbia, Canada company. This page summarizes where your data is processed before you sign up or subscribe.
Infrastructure regions
- Application database: Supabase Postgres (Montreal / Canada Central). Your reports, projects, clients and firm content are stored here.
- Authentication: Supabase Auth (Montreal / Canada Central). Handles sign-in sessions and account identity.
- AI generation: OpenAI API (United States). Identifying details are tokenized before transmission; see our Privacy Policy.
- Payments: Stripe (United States). Card data is collected by Stripe, not stored on our servers.
- File storage: uploaded files are stored in the application database or in S3-compatible object storage, depending on configuration. Ask us for the current region.
Core app hosting and authentication are in Canada. Cross-border processing still occurs through U.S.-based subprocessors such as OpenAI, Stripe, PostHog, and Google Analytics, and is disclosed in our privacy materials and contracts.
Enterprise residency options
All plans already use Canadian-hosted application data and authentication (Fly.io Toronto + Supabase Montreal). Enterprise customers can discuss additional residency paperwork, dedicated database regions, and blob options aligned to contract requirements. Contact [email protected] or see pricing.
Trust & review workflow
- Site reports: built from government data and rules, not generative AI.
- Proposal drafts: narrative sections may use automated generation and require professional review before client submission.
- Export responsibility: client PDF/Word exports include disclaimers; attestation and firm profile checks gate downloads.
- See also Disclaimer, FAQ, and sample report.
Your controls
Access, correction, and deletion requests are handled under PIPEDA. See Privacy Policy for subprocessors, retention, and contact details.