Security & record integrity

Built like a ledger, because it is one.

Corporate records are evidence. The system is built so they behave like it — not as a policy, but as a property of the database.

Every change writes an audit entry carrying the hash of the one before it. Rewrite history and the chain shows it.

Append-only registers.
Statutory ledgers cannot be silently edited — corrections are new entries, and the database itself refuses rewrites.
Tamper-evident audit trail.
Every change, hash-chained to the change before it.

Access

Your firm's records are yours alone.
Firms are isolated from each other by design; a client sees only their own company.
Sensitive fields sealed.
Social Insurance Numbers are encrypted at the application layer (AES-256-GCM) and every read is logged. Identity documents open only for reviewers, after a text-message code, and every view is logged.

No public files.
Every download passes a permission check and is logged. Nothing is ever served from a public bucket.
Export any time.
Registers, reports, documents and compiled minute books all export — the records your firm keeps belong to your firm.

AI on a leash.
AI proposes; your professionals approve. Nothing AI-generated is ever finalized automatically, and your records are never used to train AI models.

No badge wall here — these are properties of the system, stated plainly. The same facts, in more detail, are in our Privacy Policy.

Data residency	Hosted in Montréal — Google Cloud northamerica-northeast1.
Encryption	TLS in transit. Google-managed encryption at rest, plus AES-256-GCM application-layer encryption for SINs.
Backups	Daily backups, with 7-day point-in-time recovery.
Tenant isolation	Database row-level security isolates every workspace — a forgotten filter returns nothing, not someone else's rows.
Sensitive actions	Text-message codes gate admin access, SIN reveals and identity-document views.
Access logging	Every change writes a tamper-evident audit entry; sensitive reads (SIN, identity documents) are logged too.
Export & deletion	Registers, reports, documents and compiled minute books export at any time. Nothing is deleted automatically — if you cancel, your workspace becomes read-only and stays available to export. To close a workspace, contact support@ohmyregistry.com.
Sign-in protection	Sign in with Google or with email and password. Text-message codes add a second check for admin access, SIN reveals and identity documents.
Responsible disclosure	Found a security issue? Email support@ohmyregistry.com — we respond to every report.

$1.25 a month, billed $15 a year

Introductory pricing — subject to change.