Security & Data Protection Standards
Last updated: October 2026 · Host Infrastructure: AWS Canada Central (ca-central-1)
1. Canadian Sovereign Hosting & Data Residency
Your sensitive personal information, immigration identification numbers (UCI and Application numbers), and release PDFs never cross unauthorized foreign borders.
All primary application databases and encrypted document buckets are physically located in Montreal and Central Canada (AWS ca-central-1 region), ensuring full jurisdiction under Canadian federal law, including PIPEDA and the Privacy Act.
2. End-to-End Cryptographic Protection
In-Transit Encryption
Every interaction with GCMSFile.ca is guarded by TLS 1.3 encryption with ECDHE key exchange and SHA-256 certificates, preventing man-in-the-middle interception.
At-Rest AES-256 Storage
All uploaded IMM 5744 consent documents and released government records are stored in private encrypted object storage using military-grade AES-256 algorithms.
3. Zero-Knowledge Document Handling
We treat your case details with strict professional confidence:
- Documents uploaded during checkout are placed in a quarantined processing directory accessible only to authorized intake officers.
- Only the authorized Canadian citizen or permanent resident representative designated on your IMM 5744 submits your request to Ottawa.
- Once your government ATIP disclosure PDF is delivered to your encrypted portal dashboard, access is restricted strictly to your account.
4. Payment Security & PCI-DSS Compliance
GCMSFile.ca never stores, sees, or processes credit card numbers on our servers. All financial transactions are processed directly through Stripe Payments, certified to PCI Service Provider Level 1 (the most stringent level of security certification available in the payments industry).