Quebec has two laws most builders treat as an afterthought: Law 25 for privacy and Bill 96 for language. We build to both from the first line of code — because retrofitting compliance after launch is how projects get fined, and how trust gets lost. Here's what they require, and how we handle it.
Quebec's modernized privacy law. If you collect personal information from Quebec residents — names, emails, phone numbers — it applies to you, regardless of company size. It's often described as Quebec's answer to GDPR.
Bill 96 strengthens French-language obligations for businesses operating in Quebec. Commercial sites and customer communications must be available in French — and French can't be treated as a second-class translation bolted on at the end.
Compliance isn't a policy page — it's how the system is built. These are defaults in everything we ship.
API keys never touch the browser. Every model call is proxied through a serverless endpoint — no credentials exposed to the client.
No pre-checked boxes, no buried opt-ins. Consent is captured plainly, timestamped, and withdrawable at any time.
Every conversational agent defaults to French, detects visitor language, and never relegates French to a secondary translation.
We collect what a request actually needs — nothing speculative, nothing "just in case." Less data held is less data at risk.
A compliance review tells you exactly where your systems meet Law 25 and Bill 96 — and where they don't. Findings scored, fixes mapped, in plain language.
Request a review →This page is general information about Quebec's regulatory landscape, not legal advice. For obligations specific to your business, consult a Quebec-licensed professional or the Commission d'accès à l'information.