New: AI Privacy Impact Assessments for teams shipping AI features. Learn about AI-PIAs
Industries
Industries We Serve
The same privacy and security services, scoped for how each sector actually works — its regulators, its systems and the reviews it has to pass. 46 industries and counting.
Clinical care providers
Dental Practices
Privacy and security for Canadian dental practices: PHIPA custodianship, RCDSO records rules, CDAnet claims data and DSO acquisition risk, handled for you.
Physiotherapy & Chiropractic Clinics
Privacy and security advisory for Ontario physiotherapy and chiropractic clinics: HCAI/OCF disclosures, College retention rules, and PHIPA custodian duties.
Mental Health & Counselling Practices
Privacy and security for Canadian therapy practices: PHIPA custodian duties, CRPO record standards, AI scribe consent and Vastaamo-style breach planning.
Pharmacies
Privacy and security for Canadian pharmacies: PHIPA custodian status, the Designated Manager, dispensing-system risk and dual OCP/IPC breach reporting.
Medical & Diagnostic Labs
Privacy and security for medical and diagnostic labs: PHIPA custodian duties, LSCLA licensing, OLIS reporting and ISO 15189-aligned security programs.
Medical Imaging Clinics
Privacy and security for medical imaging clinics: PHIPA-aligned programs covering RIS/PACS, DICOM exposure, ICHSC licensing and radiology AI oversight.
Home & Community Care Agencies
Privacy and security advisory for home and community care agencies: SPO contract schedules, PSW field-device controls, and CHRIS-scale access governance.
Long-Term Care & Retirement Homes
Privacy and security for Ontario long-term care and retirement homes: dual PHIPA custodian status, SDM access rules, and eMAR downtime planning.
Digital health & life sciences
Virtual Care & Telehealth Platforms
Privacy advisory for Canadian virtual care platforms: custodian vs vendor status, Ontario Health verification, and US HIPAA readiness.
AI Scribe & Clinical AI Vendors
Privacy and security advisory for Canadian AI scribe and clinical AI vendors: PHIPA agent status, IPC scribe guidance, and Infoway pre-qualification support.
Patient Engagement & Scheduling Apps
Privacy and security for patient booking, portal and eReferral vendors: PHIPA agent/ESP/HINP duties, Ontario Health OAB standards, SOC 2 and HIPAA readiness.
Medical Device Makers
Privacy and security advisory for Canadian medical device makers: Health Canada cybersecurity evidence, ISO 13485-aligned programs, RPM cloud compliance.
Biotech & Pharma Companies
Privacy and security advisory for Canadian biotech and pharma companies: trial data, PSP hub oversight, GCP/GMP-aligned controls, and licensing diligence.
Clinical Research Organizations
Privacy and security advisory for Canadian CROs: sponsor qualification audits, key-coded trial data, GCP record duties, and SOC 2 or ISO 27001 evidence.
Health Charities & Patient Organizations
Privacy and security for Canadian health charities and patient organizations: donor CRMs, PHIPA custodian status, registries and the Blackbaud pattern.
Fintech & financial services
Payment Processors & PayFacs
Payment processor and PayFac privacy & security: RPAA frameworks, PCI DSS v4, FINTRAC and sponsor-bank due diligence support for Canadian PSPs.
Online Lenders & BNPL Providers
Privacy and security for online lenders and BNPL providers: Law 25 automated-decision duties, credit-bureau audits, B-10 partner reviews and breach readiness.
Wealth Management & Robo-Advisors
Privacy and security for wealth managers and robo-advisors: CIRO Rule 3703 reporting, NI 31-103 controls, KYC data protection and allocator DDQ readiness.
Credit Unions & Caisses Populaires
Privacy and security for credit unions: FSRA IT risk readiness, member data protection, shared-core vendor risk and board-level programs from a Canadian team.
Insurance Brokerages & MGAs
Privacy and security for insurance brokerages and MGAs: RIBO-aligned safeguards, BMS protection, carrier-portal controls and FSRA-ready programs.
Insurtech Companies
Privacy and security for insurtech companies: carrier B-10 vendor reviews, Québec's alternative-distribution rules and underwriting-AI risk in one program.
Accounting & Bookkeeping Firms
Privacy and security for Canadian accounting and bookkeeping firms: PIPEDA, Law 25, CPA Rule 208 confidentiality and FINTRAC duties around tax season.
SaaS & technology
B2B SaaS Companies
Privacy and security advisory for B2B SaaS companies selling to enterprise: SOC 2, questionnaires, vCISO and VPO support built around a multi-tenant product.
HR Tech & Payroll Platforms
Privacy and security for HR tech and payroll platforms: protect SINs and banking data, meet Law 25 hiring-AI rules, and pass enterprise HR vendor reviews.
Martech & Adtech Platforms
Privacy and security for martech and adtech platforms: prove consent under CASL, meet Law 25 default-off tracking rules, and clear brand vendor reviews.
Edtech Platforms
Privacy and security for edtech platforms selling to Canadian school boards: MFIPPA/FOIPPA-ready contracts, PPM 164, and post-PowerSchool vendor terms.
Proptech & Real Estate Software
Privacy and security for Canadian proptech: tenant screening, PAD payments, MLS data feeds and REIT vendor reviews, handled inside your build cycle.
Legaltech Companies
Privacy and security for legaltech companies: pass law-firm cloud due diligence, meet FLSC confidentiality duties, and ship AI drafting features safely.
MSPs & IT Consultancies
Privacy and security for MSPs and IT consultancies: prove your own controls to insurers, auditors and the clients whose networks you hold the keys to.
AI Startups & LLM App Builders
Privacy and security for AI startups and LLM app builders: pass enterprise AI security reviews, meet Law 25 cross-border PIA duties, and answer OPC scrutiny.
Professional services
Law Firms
Privacy and security for Canadian law firms: law society rules, privilege, trust accounts and client security reviews, supported by one Toronto-based team.
Consulting & Advisory Firms
Privacy and security for consulting firms: pass OSFI B-10 client reviews, RFP security schedules and Law 25 duties without stalling client delivery.
Staffing & Recruiting Agencies
Privacy and security for staffing and recruiting agencies: protect candidate identity data, meet Ontario ESA and AI-disclosure rules, and pass client reviews.
Marketing Agencies
Privacy and security for marketing agencies: protect client ad accounts and lists, meet CASL and Law 25, and clear enterprise vendor reviews with confidence.
Public sector & education
Municipalities
Privacy and security for municipalities: MFIPPA's 2027 PIA and breach duties, ransomware resilience, water and transit OT, and advice council can approve.
School Boards & K-12 Schools
School board privacy and security: MFIPPA 2027 readiness, O. Reg. 51/26 maturity assessments, O. Reg. 52/26 edtech notices, post-PowerSchool vendor oversight.
Colleges & Universities
Privacy and security consulting for Canadian colleges and universities: FIPPA PIAs, RROSH breach reporting, O. Reg. 51/26 readiness and research security.
Public Agencies & Crown Corporations
Privacy and security for Canadian Crown corporations and public agencies: Privacy Act and FIPPA duties, GO-ITS 25.0 alignment, and board-ready programs.
Nonprofit
Charities & Foundations
Privacy and security for Canadian charities and foundations: donor CRMs, CRA records, Law 25, CASL and vendor breaches like Blackbaud, handled practically.
Member Associations & Professional Regulators
Privacy and security for member associations and professional regulators: FIPPA, PIPA, RHPA s. 36, public registers, exam records and AMS platforms.
Commerce & industry
E-commerce & DTC Brands
Privacy and security for e-commerce and DTC brands: Law 25 cookie rules, CASL consent, SAQ A changes and Magecart defence for Canadian online retailers.
Hospitality & Hotels
Privacy and security for hotels and resorts: PMS and OTA risk, PCI scope from front desk to booking engine, Law 25 and Ontario's 2026 guest-register rules.
Real Estate Brokerages
Privacy and security for real estate brokerages in Canada: FINTRAC ID records, TRESA retention, deposit fraud defences and practical safeguards for agents.
Construction & Engineering Firms
Privacy and security for construction and engineering firms: protect drawings, bids and progress payments, and clear PSPC, Controlled Goods and CPCSC screening.
Manufacturers & Industrial IoT
Privacy and security for Canadian manufacturers: IT/OT zoning, OEM security questionnaires, CMMC and CPCSC flow-downs, and ransomware that stops production.
Logistics & Transportation Companies
Privacy and security for Canadian carriers, 3PLs and couriers: PIPEDA driver data, ELD and dashcam rules, PIP cybersecurity and cargo-theft defences.
What's Protecting Your Business from the Next Threat?
Don't wait for a breach to expose your vulnerabilities. Let Privacy Horizon secure your data, ensure compliance, and build lasting trust.