Aligned with Quebec Law 25
You stay in control of your data: access, correction, deletion, portability rights, and minimal collection are built in.
Privacy PolicySecurity at the core of every decision
Hosted in Canada - Law 25 - 700+ automated tests
Last updated: July 15, 2026
Cryptographically certified integrity
[Entree 1] -> [Hash SHA-256] -> [Entree 2] -> [Hash SHA-256] -> ...
Each record includes the cryptographic fingerprint of the previous one. Any modification breaks the chain and remains detectable.
This report can be presented in Quebec family court.
Your data stays in Canada
PostgreSQL servers on Supabase Pro (ca-central-1, Montreal, Canada), daily backups, and an architecture aligned with Quebec privacy expectations.
Hosting: Supabase Pro · Region: ca-central-1 (Montreal, Canada)
Designed for legal collaboration
Legal Pack functions arrive in Fall 2026, not before.
legal@2toits.ca
Technical security measures
- ✓ TLS 1.3 (encryption in transit)
- ✓ At-rest encryption (Supabase Pro)
- ✓ PostgreSQL Row-Level Security (RLS)
- ✓ Authentication and password management via Supabase Auth
- ✓ Short-lived renewable auth tokens
- ✓ iOS Keychain / Android Keystore
- ✓ SHA-256 integrity chain
- ✓ Helmet.js (HTTP security headers)
- ✓ Rate limiting against brute-force
- ✓ Input validation with Zod schemas
- ✓ 700+ automated tests (backend + mobile)