Skip to content

Security & compliance

Your bid pipeline is competitive intelligence. We treat it that way.

Prokure holds your business profile: the lines you carry, the manufacturers you are the authorized channel for, the bids you have won and lost, and every tender you are tracking. In your market that is not merely personal data — it is your position. This page sets out where that data lives, who can reach it, and which frameworks we are building toward, including the ones we have not started.

01 — In place today

What is true before you sign anything.

Canadian data residency

In place

Your solicitation documents, business profile and correspondence are stored and processed in Canadian cloud regions.

Per-client isolation

In place

Every client’s profile, documents and history are logically separated. One client’s data is never retrievable in another client’s context — no shared index, no cross-client retrieval.

No model training on your data

In place

Your documents, your corrections and your replies are never used to train or fine-tune a model — ours or a provider’s. What Prok learns about your business stays scoped to your account.

NDA and DPA ready now

In place

A mutual non-disclosure agreement and a Data Processing Agreement are drafted and ready to sign before the first document changes hands.

02 — What we are building toward

The frameworks, and exactly where we are on each.

No target dates below — only where each item actually stands.

SOC 2 Type II

Planned

Type I first, then the Type II observation window, opening as we onboard our first client cohort. No auditor engaged yet. When one is, this page will name the firm and the window dates.

Protected B workloads

Not yet assessed
OrganizationalNot sponsored
Designated Organization Screening and personnel Reliability Status through PSPC’s Contract Security Program.
TechnicalNot requested
Assessment against the CCCS Medium cloud security profile.

If you are bringing us into a Protected B engagement, say so early — the sponsorship path is yours to open, and knowing on day one changes how we build for you.

Controlled Goods Program

Conditional

Prok reads solicitations to find the Controlled Goods clause; it does not need to hold controlled technical data to do that. If an engagement would require us to store controlled goods information, registration is a precondition we would meet before that data is ingested, not after.

03 — Due diligence

What we send your security team.

If procurement or IT has to clear us before a pilot, ask on the intro call. You get all of it in the same week, not the same quarter.

  • 01Mutual NDA.
  • 02Data Processing Agreement, written to PIPEDA obligations.
  • 03Current sub-processor list — every third party that touches your data, and what it does.
  • 04Your security questionnaire, completed — including the questions where the honest answer is “not yet.”

Put Prok to the test

Bring the tender you wish you hadn’t missed.

Book 30 minutes with our team. After we build your business profile, we’ll run a real tender through Prok, and send you the verdict, the reasoning, and when you’d have known.