Aligned with Quebec Law 25
You stay in control of your data: access, correction, deletion, portability rights, and minimal collection are built in.
Privacy PolicySecurity at the core of every decision
Last updated: September 9, 2026
Cryptographically certified integrity
[Entree 1] -> [Hash SHA-256] -> [Entree 2] -> [Hash SHA-256] -> ...
Each record includes the cryptographic fingerprint of the previous one. Any modification breaks the chain and remains detectable.
This report can be presented in Quebec family court.
Your data stays in Canada
PostgreSQL servers on Supabase Pro (ca-central-1, Montreal, Canada), daily backups, and an architecture aligned with Quebec privacy expectations.
Hosting: Supabase Pro · Region: ca-central-1 (Montreal, Canada)
Designed for legal collaboration
Legal Pack functions arrive in Fall 2026, not before.
legal@2toits.ca
Verification report
A detailed report. Every line is tracked.
The 2Toits integrity verification report is intentionally detailed: every event, creation, modification and deletion is timestamped, linked to its author and cryptographically signed in a SHA-256 chain.
- ✓ Full line-by-line history (header, body, previous hash, current hash).
- ✓ Author, action and timestamp for every record.
- ✓ Verifiable SHA-256 chain: any tampering breaks the link and becomes visible.
- ✓ Certified PDF export for sharing with a lawyer, a mediator, or with Quebec’s family court.
Technical security measures
- ✓ TLS 1.3 (encryption in transit)
- ✓ At-rest encryption (Supabase Pro)
- ✓ PostgreSQL Row-Level Security (RLS)
- ✓ Authentication and password management via Supabase Auth
- ✓ Short-lived renewable auth tokens
- ✓ iOS Keychain / Android Keystore
- ✓ SHA-256 integrity chain
- ✓ Helmet.js (HTTP security headers)
- ✓ Rate limiting against brute-force
- ✓ Input validation with Zod schemas
- ✓ 1000+ automated tests (backend + mobile)