Resources
Guides on collecting files securely
Practical, no-fluff guides on handling sensitive documents.
Canadian data sovereignty
Where client files live, who can compel them, and what Canadian privacy law asks of you when you pick a tool.
Does the US CLOUD Act reach your clients' files?
"Stored in Canada" and "held by a Canadian company" are different claims, and only one of them decides whose court can order the files produced. Here is the difference in plain terms.
Is Dropbox PIPEDA compliant?
PIPEDA does not certify software, so no tool can hand you compliance. Here is what the law actually asks of you when you put client documents in a US-owned cloud, and what to check before you do.
Quebec Law 25 and storing client files outside Quebec
Law 25 does not ban sending personal information out of the province, but since 2023 it does require an assessment first. Here is what triggers it and what the assessment involves.
Law society guidance on storing client files in the cloud
Canadian law societies permit cloud storage and have for years. What they ask for is due diligence, and the jurisdiction question is where privilege makes a lawyer's analysis different from everyone else's.
Twelve questions to ask a vendor about where your data lives
A due-diligence checklist you can paste into an email. The answers separate vendors who have thought about jurisdiction from vendors who have a Canadian flag on the pricing page.
Collecting documents from clients
Intake by profession: what to ask for, how to ask for it once, and how to stop chasing attachments.
How to collect a rental application securely
Rental applications are full of sensitive data. Here's how to collect them without exposing applicants - or yourself - to email risk.
Client intake and PHIPA: collecting health documents safely
If you collect intake forms, insurance cards, or prior records, here's how to handle them in a way that respects PHIPA and HIPAA expectations.
Collecting onboarding documents from new hires securely
Onboarding means collecting ID, banking and tax forms from someone who doesn't have a login yet. Here's how to do it without insecure email.
FINTRAC document collection for real estate agents
Real estate transactions come with ID and source-of-funds obligations. Here's how to collect that paperwork securely on every deal.
Secure financial disclosure for insolvency and debt files
An insolvency file means collecting dozens of financial documents from someone already under stress. Here's how to make intake painless and secure.
Sending files and leaving email behind
What the consumer transfer tools actually do with your files, and what to use instead when the documents are sensitive.
A secure alternative to WeTransfer for sensitive files
WeTransfer and public Dropbox links are convenient, but anyone with the link can open the file. Here's what to use when the contents are sensitive.
Is WeTransfer secure? What to know before sending sensitive files
WeTransfer encrypts transfers, but a share link is still a link anyone can open. Here is what that means for sensitive documents and what to use instead.
How to send tax documents securely
Tax slips, returns, and supporting records are a goldmine for fraud. Here is how to send them to an accountant or client without leaving copies in email.
An encrypted alternative to email attachments
Email attachments are unencrypted, permanent, and easy to misfire. Here is a simple encrypted channel to use when an attachment is the wrong call.