Built for Canadian municipalities
Where your residents' data lives, how it is protected, and how you deploy it.
Data residency is configured per deployment, to meet the law of the country you operate in. On this deployment, resident reports, photos and voice recordings are stored in Canada. Several steps run outside Canada — automated classification, address lookup, sign-in identity and SMS delivery, and database backups — and every one of them is set out in full in our privacy policy.
Canadian data hosting
Resident reports, photos and voice recordings for this deployment are stored on Canadian cloud infrastructure, in Canadian regions. Several processing steps run outside Canada — they are named in the residency note below and enumerated in full in our privacy policy.
99.9% uptime SLA
An annual availability target, written into your agreement rather than into a marketing page.
Daily backups
Automated daily backups of the municipal database, retained seven days, with point-in-time recovery on production. Backups are currently held in Google Cloud's United States multi-region — see the residency note above.
Secure cloud infrastructure
Google Cloud, with database-level isolation between municipalities — one city's staff cannot read another city's data, and that is enforced by the database rather than by application code.
API access
My City can exchange data with the systems you already run — handing new requests to a municipal dispatch or work-management system as they arrive, and taking updates back. What moves in each direction is defined with you as part of the deployment.
Cloud or on-premise deployment
Managed by us on Canadian cloud infrastructure, or deployed inside your own municipal data centre instead — connected to the infrastructure it needs. Same product, same updates, your perimeter. Scoped with you before it goes into a tender.
Report history
Every report carries its own history: which department it was routed to, when each stage happened, the messages exchanged with the resident, and the recorded reason for any rejection.
SOC 2-aligned security controls
We build against the SOC 2 control set. My City is not SOC 2 certified today, and we will not say otherwise until an auditor does.
Privacy by design
Faces and licence plates are automatically blurred on resident photos before they are stored and shown to municipal staff.
Canadian privacy law
Built against PIPEDA and Quebec's Law 25. The privacy policy names every processing step, including the ones that cross the border.
Need this in a procurement file?
We will walk your IT and privacy leads through the deployment, the data flows and the disclosure, on a call.