Security and residency
Where your agent lives, and who can reach it
A plain statement, kept short so it stays true.
- Servers
- Vancouver and Toronto
- Agent machines
- Toronto
- Report
- SOC 2 Type II
- Desk
- North America
Residency
What we promise about your data
Your agent's memory, files, logs and backups stay on our servers in Vancouver and Toronto. Each model call goes only to the provider you chose, under that provider's terms.
Model calls may leave Canada. What leaves in a call is what the agent sends for that request: the message, and the pieces of your data it pulled in to answer it. Not your files, and not your backups. You decide which folders and which mailboxes the agent can reach, and we write that down on the handover call.
If a provider tells you it serves a model from a Canadian region, ask us to check it before you rely on it.
iDigital Internet Inc. is a British Columbia company, Canadian-owned, with no parent company abroad. Canadian federal privacy law (PIPEDA, the law that covers personal information in business) and British Columbia's own privacy law (PIPA) apply to us.
Sub-processors
Who else touches it
A sub-processor is an outside company that can see or hold your data because of how the service works.
There are only us and the provider you pick. iDigital Internet Inc. runs the machine, the backups and the desk. The model provider you choose runs the model your agent calls, under that provider's terms, and you hold the key and the bill. Ask us on the call for the current list in writing before you connect a system.
Spending
You set the limit, not us
Before you connect your model key, you set a monthly spend limit in your provider's console. We do it with you on the handover call. We never resell model usage, so there is no meter of ours between you and that bill.
Hardening
How the image is built
This is the build sheet for the customer image. Our own agent's machine has run on this shape since February 2026 and is being rebuilt into the image now; the first customer machines go out once it has passed its update and rollback tests.
- The agent's control port listens only on the machine itself. There is no public port to find.
- The instruction files the agent runs from are locked, so a message cannot rewrite what it is allowed to do.
- A watchdog restarts the agent if it stops, with a restart limit so a crash loop cannot run away.
- Updates are pinned and tested before they reach your machine, with a snapshot first and a rollback if the health check fails.
- Backups every night, kept 14 days, restored on request or after a failed update.
- Root access to the machine stays with our desk and is opened only on a ticket you filed. The ticket shows who opened it and when.
Who can reach it
Our desk, and what it can see
Support staff on our desk in North America may open your agent machine while they work a ticket you filed. Access is scoped to that ticket and logged, and the ticket shows who opened it and when. Anything that writes to your systems waits for your approval. iDigital Internet Inc. holds a SOC 2 Type II report, an independent audit of our security controls; ask us for the report period and the scope letter.
When you leave: cancel, take the image and the runbook, and we delete the machine and its last backup within 14 days. The rest of the answers — where it is, whose law, who runs it, who holds the keys — are on the Managed Agent VM page.
Questions about a specific system?
Ask before you connect it. That is what the call is for.