Compliance & Data Protection
Compliance & Security
Tax sale proceedings involve sensitive property owner data, financial information, and legally binding proceedings that demand the highest standards of data protection, audit integrity, and regulatory compliance. Civic Tax Sale is built from the ground up to meet the legislative requirements that Canadian municipalities must satisfy. Delivered as a full source code licence — your municipality retains complete control.
Canadian Municipal Compliance
Municipal & Provincial Regulations
Purpose-built for Canadian municipalities, with full alignment to federal, provincial, and municipal legislation governing public-sector data management.
Ontario
Full compliance with Part XI requirements for tax sale proceedings — s.373 eligibility and certificate registration, s.374 statutory notice to owners and encumbrancers, s.375 cancellation provisions, s.379 public tender procedures, s.380 surplus distribution priority. Every statutory deadline, notice requirement, and procedural step is enforced by the platform's workflow engine with immutable audit trail.
Ontario
Built-in MFIPPA Access Request Search across all tax sale case data — certificates, notices, title search records, financial transactions, proof-of-service documents, and audit logs — with redaction tools (s.6–15), 30-day deadline tracking, and exportable response packages. Property owner personal information protected per MFIPPA collection and disclosure requirements.
Ontario
WCAG 2.1 AA compliance across all application interfaces. Screen reader compatibility, keyboard navigation, colour contrast ratios, and accessible form labelling verified through third-party VPAT assessment. Public-facing tender notices and publications meet AODA alternative format requirements.
Canada (Federal)
Consent management and data minimization controls for property owner personal information. Breach notification workflows aligned with federal requirements. Right of access and correction workflows support data requests from property owners involved in tax sale proceedings.
Ontario
Spousal notice compliance tracking per Family Law Act requirements for properties designated as matrimonial homes. System enforces identification and notification of spousal interests before proceedings can advance to tender stage, preventing void proceedings.
Ontario
Alignment with the Ontario government's cybersecurity standards for public sector organizations including risk assessment, incident response, and continuous monitoring requirements for systems handling sensitive financial and property data.
Canada (Federal)
Infrastructure and operational controls aligned with the Government of Canada's cloud adoption guardrails for Protected B data classification, including Canadian data residency and encryption requirements for financial and personal information.
“Compliance is not a feature we bolted on after launch — it is the architectural foundation every line of code is written against. Canadian municipalities deserve a platform that treats their legislative obligations as first-class requirements.”
Civic Engineering
· Platform Architecture TeamRegulatory Compliance
Industry Frameworks
Beyond municipal legislation, satisfies internationally recognized compliance frameworks.
Provincial legislation establishing the legal framework for municipal tax sale proceedings — eligibility criteria, certificate registration, statutory notice requirements, cancellation provisions, public tender procedures, surplus distribution, and vesting.
- Automated arrears eligibility verification against s.373 criteria (2+ years of arrears)
- Certificate registration workflow with LRO integration per s.373(3)
- Multi-party statutory notice engine per s.374 — owner (3 intervals), encumbrancers, and spousal interests
- Cancellation price calculation per s.375 with daily interest accrual and complete cost itemization
- Tender procedure compliance per s.379 — minimum tender, advertisement timing, bid opening, witness documentation
- Surplus distribution per s.380 — encumbrancer priority, former owner entitlement, cost recovery accounting
Ontario legislation governing access to municipal records and protection of personal privacy. Tax sale proceedings generate significant records containing property owner personal information that are subject to access requests.
- Complete audit trail of all data access, modification, and disclosure events with before/after snapshots
- MFIPPA Access Request Search across all tax sale case data with redaction tools (s.6–15)
- 30-day response deadline tracking with automated alerts at 20, 25, and 28 days
- Property owner personal information collection tracked per MFIPPA s.28(2) — authority, purpose, and access history
- Records retention schedules enforced per Ontario municipal records management guidelines with legal hold capability
International standard for web accessibility, mandated for Ontario public sector organizations under the Accessibility for Ontarians with Disabilities Act (AODA). All tax sale interfaces and public-facing documents must meet AA standards.
- Full keyboard navigation for all application functions
- Screen reader compatibility tested with JAWS, NVDA, and VoiceOver
- Colour contrast ratios meeting AA minimums (4.5:1 for normal text, 3:1 for large text)
- Semantic HTML structure with proper heading hierarchy and ARIA landmarks
- Focus management for dynamic content, modals, and navigation patterns
- Accessible form labels, error messages, and validation feedback
- Public tender notices generated in accessible formats per AODA requirements
Tax sale case files must be retained for extended periods per municipal classification schemes to support future title disputes, legal challenges, and MFIPPA access requests. Proper retention and archival is a legal obligation.
- Records classification aligned with municipal functional classification schemes for tax sale proceedings
- Retention period enforcement per entity type — certificates, notices, financial records, title searches, bid records, deeds
- Legal hold capability to prevent disposition of records subject to litigation or future challenge
- PDF/A archival export for long-term preservation of complete case files
- Nightly retention engine identifies expired records, excludes legal holds, and queues for Clerk approval before disposition
- Integration with municipal records management systems (EDRMS) where deployed
Data Sovereignty
Canadian Data Residency
All Civic Tax Sale data — property owner information, financial records, title search results, certificates, notices, and audit logs — is stored and processed exclusively within Canadian borders. With a full source code licence, municipalities can deploy on their own infrastructure or approved Canadian cloud providers — ensuring no property owner personal information is transferred to, stored in, or accessible from infrastructure located outside of Canada.
Hosting
Canadian Only
Centres
3 Redundant
Encryption
AES-256
Sovereignty
PIPEDA / MFIPPA
Platform Security
Security Capabilities
Click any capability to explore the technical details behind each security layer.
Auditability
Audit Trail Features
Every action is logged, timestamped, and immutable — providing the complete audit trail required by provincial legislation and municipal accountability standards.
Every record access logged with user, timestamp, IP address, user agent, session ID, and action type (create/read/update/delete/export/login/logout/search)
Every data modification logged with before and after values (full snapshot) — critical for tax sale proceedings where every change must be traceable
Every property owner PII view logged — tracking who viewed which owner's personal and financial information and when
Every certificate, notice, and financial record change logged with complete audit chain from initiation to completion
Exportable audit reports filtered by case, user, date range, record type, and action — supporting internal audit and external oversight
Immutable audit log — entries cannot be modified or deleted by any user role including system administrators, ensuring legal defensibility
Configurable audit data retention periods meeting provincial requirements (minimum 7 years, default 10 years for tax sale proceedings)
Real-time anomaly alerting: bulk data export, after-hours access to financial records, repeated failed logins, privilege escalation attempts