Privacy & Ethics Compliance
Our commitment to protecting your data and supporting ethical research practices.
We adhere to PIPEDA and TCPS2 guidelines to ensure your privacy and rights are protected.
PIPEDA Compliance
Personal Information Protection Standards
Full compliance with Canada’s federal privacy law governing personal information handling in commercial activities.
- 10 Fair Information Principles
- Consent Management
- Data Protection & Security
- Individual Access Rights
10 Fair Information Principles
Privacy Protection
TCPS2 Standards
Ethical Research Conduct
Adherence to Tri‑Council Policy Statement for ethical conduct in research involving humans.
- Respect for Persons
- Concern for Welfare
- Justice & Fairness
- Informed Consent
Core Ethical Principles
Research Ethics
PIPEDA Fair Information Principles Compliance
How Ethic8 implements each of the 10 Fair Information Principles required by PIPEDA
| PIPEDA Principles | Description | Our Implementation | Status |
|---|---|---|---|
| Accountability | Organizations are responsible for personal information under their control and must designate an individual to be accountable for compliance. | A privacy‑first approach is embedded in our platform design. The core team oversees privacy and security with a designated contact (privacy@ethicai.ca) handling privacy matters. | Compliant |
| Identifying Purposes | The purposes for which personal information is collected shall be identified before or at the time of collection. | Each tool is designed with a clear and limited purpose (e.g., transcription, data analysis). All data categories have clearly stated purposes in the Privacy Policy. | Compliant |
| Consent | The knowledge and consent of the individual are required for the collection, use, or disclosure of personal information. | Consent is obtained explicitly at the point of tool use. Users must agree to the Terms and Privacy Policy before accessing any features. | Compliant |
| Limiting Collection | The collection of personal information shall be limited to that which is necessary for the purposes identified. | Only essential data is collected: account credentials, uploaded files for processing, and minimal usage data. No unnecessary or sensitive data is collected. | Compliant |
| Limiting Use, Disclosure and Retention | Personal information shall not be used or disclosed for purposes other than those for which it was collected. | No retention or use of user data after processing. No third‑party data access. No data used for AI training or machine learning. | Compliant |
| Accuracy | Personal information shall be as accurate, complete, and up‑to‑date as is necessary for the purposes for which it is to be used. | Users can access, correct, or delete their account information through the dashboard. | Compliant |
| Safeguards | Personal information shall be protected by security safeguards appropriate to the sensitivity of the information. | Ethic8 uses trusted third‑party parties and Canadian‑hosted infrastructure. No data retention, no data mirrors or backups. Privacy‑preserving design across all tools. | Compliant |
| Openness | An organization shall make readily available to individuals specific information about its policies and practices. | A detailed Privacy Policy and Terms & Conditions are publicly available at ethic8.com. | Compliant |
| Individual Access | Upon request, an individual shall be informed of the existence, use, and disclosure of their personal information. | Users can manage their information via their account and may contact privacy@ethicai.ca for additional data inquiries. | Compliant |
| Challenging Compliance | An individual shall be able to address a challenge concerning compliance with the above principles. | Users can contact privacy@ethicai.ca to challenge compliance. A contact channel is in place. | Compliant |