Starting point01
The real world
Agent AlexArc starts with your operations. Defensible compliance must begin with reality, not with an abstract model.
Compliance module
AlexArc capabilities tostructure, execute, and demonstrateyour compliance.
AlexArc turns compliance into an operational trajectory. The platform helps SMBs start from reality, qualify applicable obligations, prioritize actions, structure evidence, and maintain a cadence over time.
How Agent AlexArc serves your organization
AlexArc helps your team turn compliance requirements into structured work: actions to complete, owners to assign, evidence to upload, registers to update, follow-ups to maintain, and escalations to trigger when the issue requires human involvement.
Agent AlexArc does not promise perfect compliance. It serves your organization by making its approach clearer, more structured, more traceable, and more defensible.
A discreet, structured agent built on traceability
Agent AlexArc is built on a simple conviction: useful compliance is not limited to producing documents. It must allow an organization to demonstrate, with method, what it does, why it does it, who is responsible, and what evidence exists. Its role: prepare the file, surface blind spots, and call the human expert at the right time.
Demonstration point02
The evidence
The platform connects actions to expected evidence: policies, registers, contracts, logs, screenshots, and validations.
Maintenance point03
Time
AlexArc creates a cadence of reviews, reminders, expirations, renewals, and follow-ups.
A solid framework
ISO/IEC 27701
The foundation of the module: 86 controls and 222 types of expected evidence.
Quebec Law 25 and GDPR
The two active jurisdictions: Quebec’s privacy law and the European regulation.
Templates by sector
Registers pre-filled for your activity, with 87 to 164 processing activities each.
Sectors covered by the templates
- Private business
- Beauty
- Spas
- Dentistry
- Optometry
- Education
- Municipalities
- Non-profits
- Funeral services
- Plumbing
- Electrical
Six capabilities
All your registers in one place
Every register is linked to the controls of the framework, so you always know what is documented and what is missing.
RoPA
The record of processing activities, with an approval workflow.
Evidence
Upload, four confidentiality levels, links to controls, a confidence score and freshness.
Privacy incidents
Assessment of the risk of serious injury and the notification decision.
Access and correction requests
Several intake channels, final decision and erasure.
Vendors
Role, risk level, security safeguards and transfers outside the jurisdiction.
DPIA
Detection of the cases where one is required, pre-filling, assessment of transfers outside Quebec, approval and export of the file.
Data lifecycle
Retention, legal holds, a destruction log and alerts when retention has expired.
Collection and consent
Collection points derived from the RoPA, consents, legal bases and data subjects.
Inventory and security
Inventory by person, system and data, with a risk level, and security measures.
Privacy officer
The designation of the person in charge of the protection of personal information (DPO).
Manage it, not just document it
01
Controls explorer
Gap analysis, control by control.
02
Remediation board
Tasks, priorities, owners and approval.
03
Guided sessions
Sessions of 5, 15, 30 or 60 minutes that fill in the register and the evidence as you answer.
AI that assists. You stay in control.
In the RoPA, AI suggests field-by-field entries. You accept, edit or reject them: nothing is written without you.
Your data, exportable
Twelve registers can be exported to CSV, in English or French.
The AlexArc process in six steps
- 01.
Observe
AlexArc starts with the real world: activities, systems, vendors, data, incidents, requests, documents, and constraints.
- 02.
Qualify
The platform connects that context to applicable obligations based on role, activities, and jurisdictions.
- 03.
Prioritize
AlexArc distinguishes critical gaps, incomplete elements, missing evidence, and actions that can be planned.
- 04.
Execute
Obligations become concrete actions: complete, upload, review, update, validate, or launch a session.
- 05.
Prove
AlexArc connects actions to expected evidence: policies, registers, contracts, logs, screenshots, and decisions.
- 06.
Maintain
Compliance becomes a cadence: periodic reviews, alerts, renewals, expirations, and documented follow-ups.
Working with your vDPO / vPrivacy Officer firm
Your firm delivers its work to you in Agent AlexArc: documents, follow-up reports and mandates. You approve them, comment on them or request changes. You give the firm access with a code, and you can revoke that access at any time.
The partner program →“What was missing was not just a list of obligations. It was a clear way to know what to do, who had to act, and what evidence to keep.”
How much does it cost?
Prices in Canadian dollars, taxes extra. 12-month commitment, renewed automatically.
See pricing →Compliance
From$74.95 / month$799 / year
$799 / year$74.95 / month
One organization, two jurisdictions, one register template and 15 seats included.
Ready to structure your compliance?
Create your account, configure your organization, and start turning your obligations into actions, your actions into evidence, and your evidence into a defensible trajectory.
AlexArc