VisaNauta's commitment to CICC compliance, data security, and regulatory excellence
Built from the ground up to meet CICC By-Law 21, PIPEDA, and IRCC requirements
VisaNauta takes no commission on fees, retainers, or client payments. You keep 100% of client money. Pure practice management tool.
Every action logged with timestamps and user attribution. Full compliance with CICC By-Law 21 audit requirements.
All records, communications, and documents retained for minimum 6 years to meet CICC and IRCC requirements.
Multi-factor authentication required for all users. Optional TOTP 2FA and security keys supported.
When a user requests account deletion:
No. VisaNauta is a practice management tool, not a payment processor. We charge flat monthly subscription. You keep 100% of client fees. 100% CICC By-Law 21 compliant.
Immutable audit trail, 6-year retention, mandatory MFA, full communication logging, and zero third-party data sharing. All built-in from day one.
All VisaNauta data stored in Canadian data centers (Montreal region). No data transferred outside Canada without explicit consent. PIPEDA compliant.
Account soft-deleted immediately. Client data permanently deleted after 30 days. Audit logs retained for 6 years (legal requirement). Confirmation email sent on completion.
AES-256 encryption at rest, TLS 1.3 in transit, SOC 2 audits, and bug bounty programs. In breach event, we notify affected users within 24 hours.
Yes. Request full data export anytime in CSV, JSON, or PDF. Includes all clients, cases, documents, communications. No fees or delays.
VisaNauta's architecture designed from the ground up for CICC, PIPEDA, and IRCC requirements.