Security & Compliance

E-FUTURE designs physical infrastructure and access controls around the assumption that customers, partners and regulators need verifiable, defensible operating practices. This page summarizes our current controls and our certification roadmap.

Physical & Facility Security

Controlled access to all operational areas; entry limited to authorized personnel on a need-to-access basis.
Perimeter and interior monitoring, with access logging for sensitive zones.
Segregated power, cooling and network paths; redundancy designed for controlled, orderly recovery.
Facility procedures documented for site readiness, delivery phases and operations handover.

Data Protection

Personal data is handled in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Controls are aligned to GDPR principles for European customers: purpose limitation, data minimization, restricted retention and defined subject rights.
Encrypted transmission for sensitive data; invitation-only accounts, multi-factor authentication and role-based access.
Private file storage, controlled file delivery, rate limiting and security logging are applied to operational systems.

Certification Roadmap

Current posture

Independent SOC 2 Type II examination and ISO/IEC 27001 certification are on our roadmap. E-FUTURE does not currently claim independent audit or certification to these standards.

We do not claim certification we do not hold. On request under NDA we provide our control description, security self-assessment and relevant policies for customer due diligence.

Documents Available Under NDA

For vendor due diligence, E-FUTURE can provide, subject to a non-disclosure agreement:

Service Level Agreement (SLA) sample
Data Processing Agreement (DPA)
Standard Terms & Conditions (T&C)
Security self-assessment and control description

Contact

For security or compliance inquiries, contact info@e-future.ca or call +1 (403) 376-8858.