Canadian owned and hosted. Your documents stay in Canada.
The page to hand your security reviewer
Everything below is also somewhere else on this site or in our agreements. It is collected here because a questionnaire is answered in one sitting, not by reading a website.
Where it runs
On hardware Nimble owns and operates. There is no hyperscaler underneath, and no customer-hosted or bring-your-own-cloud option exists.
Canadian facilities
Protected B certified facilities in Aurora, Ottawa and Winnipeg, staffed by security-cleared Canadian personnel. Your documents are stored, processed and backed up inside them.
Canadian jurisdiction
Nimble is Canadian-owned with no foreign parent, so no foreign court or statute, the US CLOUD Act included, has a route to compel the company operating the servers.
Audited operation
Nimble is SOC 2 Type II audited, aligns its infrastructure to ITSG-33, and is compliant with PIPEDA, PHIPA, FIPPA and ITSP.10.033.
Encryption
In transit and at rest, with the at-rest half doing more than the phrase usually means.
Who can see what
Three roles, and an organization boundary that no query crosses.
The roles
An Admin manages accounts and sees the whole organization. A Sender sends envelopes and sees only their own. A Viewer reads the organization and changes nothing.
Checked three times
A request is authorized at the page, again in the service behind it, and a third time in the query, which is scoped to the caller’s organization before it runs. The REST API goes through the same services, so it is scoped identically.
Proven, not asserted
A test suite exists purely to fail if one organization can read or write another’s data, at every layer. It runs on every build.
Getting in
Your staff sign in. Your signers never do.
What gets recorded
Every step of an envelope, in an order that cannot be quietly edited afterwards.
A chain, not a log
Each event is hash-chained to the one before it. Removing or altering an entry breaks the chain, and the break is detectable by anyone holding the finished envelope.
Sealed on completion
A finished envelope carries a digital seal over the documents and the certificate together, with a trusted timestamp where one is configured.
And it verifies
The certificate states pass or fail against that chain, so an alteration after the fact does not merely look suspicious, it fails a check anyone can run.
If something goes wrong
No system is perfectly secure, and a page that implies otherwise is not worth reading. If a breach of our safeguards creates a real risk of significant harm, we notify the affected individuals and the Office of the Privacy Commissioner of Canada as PIPEDA requires, and the affected customers without undue delay.
Nimble’s Privacy Officer is accountable for this, and is also the person in charge of protecting personal information for the purposes of Quebec law.
The commitment in full, in the Privacy PolicyAnd if you leave
For 30 days after an account closes you can export your completed envelopes and their certificates in ordinary formats. Content is then deleted from active systems on our retention schedule, with backups ageing out on a defined cycle.
Anything already downloaded keeps working. A sealed document verifies on its own, without us and without an account.
What we don’t claim
A reviewer who finds a gap we skipped past trusts nothing else on the page, so here are ours.
Still have a questionnaire to fill in?
Send it to us. We would rather answer it than have you guess from a website, and the answers come from the people who run the thing.