pipeda

Privacy and security checks for your codebase — static analysis mapped to PIPEDA, Law 25, and SOC 2

Angular-based PIPEDA Request Automator

Tiny dependency-free cookie consent banner (4.8 KB gzipped): reject as easy as accept, script blocking by category, Google Consent Mode v2, EN/FR/ES, accessible. Law 25 / PIPEDA friendly.

See the cookies, storage and third-party trackers a website loads BEFORE the visitor consents (Quebec Law 25 / PIPEDA context). Headless Chromium, never clicks the banner. 97 tests.

Hide personal info (names, health card, SIN, NHS numbers) before it goes into ChatGPT, then put it back in the answer. Runs 100% in your browser. Built for nonprofits.

Policy-enforcing, audited gateway between AI agent and the tools they call

AI compliance scanner and MCP server for GDPR, CCPA/CPRA, WCAG, PCI-DSS, HIPAA, EU AI Act, LGPD, COPPA, PIPEDA, privacy, accessibility, and AI governance.

Find which AI tools are actually in use on a machine — from a USB stick. Cross-platform Shadow AI Discovery scanner producing risk-ranked audit reports. No cloud, no telemetry. MIT licensed.

Generate an English/French cookie and tracker disclosure page from a real consent-tracker-scan report, grouped by purpose, with a diff to keep it true over time.

STRIDE-based threat model for a hypothetical web application — demonstrates systematic threat identification, DREAD risk scoring, and mitigation planning

Free, open-source IoT platform for Canada. Bilingual (English/French), self-hosted, works offline, no telemetry. Privacy by design for Law 25 and PIPEDA. Dashboards, rules, MQTT/CoAP/HTTP, Modbus/OPC UA gateway. Apache-2.0.

Reference application demonstrating Canadian PIPEDA privacy anti-patterns & AICPA SOC 2 Type II control auditing with pipedact