Privacy Governance
Law 25 governance. These practices apply to this public publication and are the minimum for any private deployment.
| Control | Practice |
|---|---|
| Officer | Vincent Boucher, President, unless a published written delegation applies; info@quebec.ai. |
| Minimization | No secrets or sensitive data in the public release; only data necessary for access. |
| Retention | Temporary session; user-controlled local state; explicit purge; separate schedule for private deployment. |
| Destruction | Local purge; destruction or anonymization when purpose ends in private deployments. |
| Personnel | Role-based access, confidentiality, training and logging where people participate. |
| Complaints | Receipt at info@quebec.ai, acknowledgement, assessment, response and register. |
| PIA | Required before sensitive data, transfer outside Quebec, biometrics, automated decisions or critical systems where applicable law requires. |
| Incidents | Containment, risk assessment, register, notification and corrective action. |
Status
This publication is a readiness record, not external certification. Organizational controls must be implemented and verified in actual operations.