Privacy and Law 25
Vylan is built for Canadian firms handling personal information, including Quebec's Law 25.
Every document your clients send you is personal information, most of it the sensitive kind. That comes with obligations, and Vylan is built with them in mind.
Built for it
Vylan is built for Canadian accounting firms handling personal information, including under Quebec's Law 25. Your data is hosted in Canada, on SOC 2 Type II compliant infrastructure.
What helps in practice
- Documents go to one place instead of an email inbox that never forgets.
- Each client's link opens only their own page.
- An audit log of what happened, when, and who did it.
- Deleted engagements are permanently removed after 30 days, files included.
- You can export everything your firm holds at any time.
Where Vylan stops
Vylan is a tool, not a compliance programme, and nothing here is legal advice. Your obligations to your clients are yours: what you collect, why, how long you keep it, and what you tell them about it. We can tell you where the data lives and hand you the record of what happened. What you owe your clients under the law is a question for your own advisers.
The full policy
The details are in our privacy policy. For anything it does not answer, write to hello@vylan.app.