Trust & Governance
Wirehead places senior I&IT contractors into the most regulated workplaces in Canada — federal departments, Crown corporations, and Schedule I banks. The expectations those clients have for a vendor are the expectations we hold ourselves to. This page makes our posture inspectable.
Personal information is collected only when it's needed for matching, application processing, or compliance — and only kept for as long as the lawful basis lasts. Candidates can review, correct, and request deletion of their data at any time.
Encrypted transport and storage, role-based access on every internal surface, MFA mandatory on every administrative account, automated dependency monitoring, and a documented incident-response runbook.
Wirehead Corporation is incorporated in Ontario, headquartered in Toronto, and operates under PIPEDA and Quebec Law 25. The platform ships in EN-CA and FR-CA at parity per Bill 96. Data residency in Canada Central is on the post-launch roadmap.
We don't claim certifications we haven't earned. SOC 2 is targeted, not yet attested. AI Match is disclosed in plain language. Every processor that touches your data is named in the Privacy Policy.
Wirehead is designed against the Canadian regulatory baseline that our clients are obligated to enforce. Each framework links to a dedicated page where one exists.
Personal Information Protection and Electronic Documents Act — the federal Canadian privacy law that governs how organisations collect, use, and disclose personal information in the course of commercial activity.
Formerly Bill 64. Quebec's strengthened privacy regime — adds consent specificity, breach reporting, cross-border transfer impact assessments, and a right to data portability.
All public surfaces ship in EN-CA and FR-CA at parity. Communications with Quebec users default to French unless they opt into English.
Canada's Anti-Spam Legislation. Every commercial email Wirehead sends includes a one-click unsubscribe link and a clear sender identifier. Consent is captured explicitly, never implied.
Wirehead is architected to the SOC 2 trust services criteria. Type I and Type II attestations are targeted post-launch on an annual audit cycle. The platform is NOT yet attested — we will publish reports here as they land.
Day-to-day controls that protect personal information and platform integrity.
Wirehead Corporation carries the commercial insurance that enterprise clients expect from a vendor of record. Coverage applies to all active contractor engagements placed through the platform.
Professional liability cover for advice, recommendations, and services delivered by Wirehead Corporation.
Commercial general liability covering third-party bodily injury and property damage arising from Wirehead's business operations.
Workplace Safety and Insurance Board cover for workplace injury claims, applied per the Ontario regulatory framework.
The Wirehead Platform is currently under capitalizable IP diligence by KPMG. The diligence package — architecture, quality gates, security posture, regulatory compliance, and operational readiness — is available to qualified reviewers under NDA. Reach out to trust@wirehead.com to begin the access process.
Reach our Trust team for security disclosures and compliance questions, or our Chief Privacy Officer for privacy-specific requests including access, correction, and deletion.
