Free tools
Free interactive tools built for privacy, legal, and product teams. Almost everything runs entirely in your browser: nothing you type or paste leaves your device, except the cookie-banner auditor's URL mode, which sends only the target URL (never your inputs) to a first-party audit endpoint. Every result is a heuristic starting point, not legal advice.
See what a specific, explainable credit decision looks like: four sample applicants, a small logistic regression, and SHAP attributions turned into plain-language reasons. Illustrative demo.
Answer ten questions about an AI agent's data stores, autonomy, and credentials, and get a risk tier plus a one-page scope statement: stores in reach, least-privilege scope, data-layer controls, and the exposure that remains. Free, in your browser.
Free audit of any website's cookie banner, in two parts: a markup check scored 0-100 (banner, consent platform, opt-in quality, pre-consent loading, policy links), plus Declared vs Observed, a client-side diff of what your consent platform discloses against what a browser actually records, with classification by the organisation that receives the data.
Interactive article: four 'anonymized' cookie jars, zero names, one fictional person. Toggle a Law 25 banner, see fictional ad-bid values, or run the test on your own cookies in your browser.
Build a living evidence file for OSFI Guideline E-23 and the AMF AI guideline (both in force May 1, 2027): model inventory, inherent risk rating, independent validation, pre-deployment cyber testing, drift monitoring, and vendor audit rights. Exports a board-ready PDF and a living-file JSON. Free, in your browser.
Audit a credit model for group fairness: seven operating points from a logistic regression on the UCI German Credit dataset, with disparate-impact ratios, equalized-odds differences, and per-group confusion matrices. Educational demo.
Answer sixteen questions drawn from the October 29, 2026 joint resolution of Canada's privacy commissioners and ombuds on responsible AI in health care. Get per-principle scores, a verdict, and a prioritized action list. Free, in your browser.
Answer a short screening and get a tailored PIA questionnaire: conditional logic, tiered depth, honest risk scoring, and PDF, Excel, and JSON export. Free, in your browser.
Score your privacy, AI governance, and operating controls with a short directional maturity assessment for Canadian organizations.
Paste a privacy policy for a free Law 25 & PIPEDA heuristic score: 11 checks on officers, rights, retention, consent, transfers, and more.
Paste text and watch Canadian identifiers get detected and redacted in your browser: SIN (Luhn-validated), OHIP numbers, postal codes, credit cards, phone numbers, emails. Nothing leaves your device.
Playable AI incident investigations: interrogate the evidence, test bias and ledger claims with interactive tools, and reach a verdict. Fiction with real cases behind it.
Legislative tracker, the Law 25 to C-36 delta map, a client-side readiness assessment, working templates, a vendor-neutral tool finder, training tracks, a plain-language glossary, and a legislative briefing signup. Free and ungated.
Interactive field guide to data inventory, data mapping, and retention: a retention timeline simulator with statute chips, a worked Café Nord walkthrough with exportable CSVs, and a blank-canvas map builder. Law 25 and PIPEDA. Everything runs in your browser.
Interactive field guide to governing cookies and scripts after the banner: a four-pass runtime audit protocol, classification by legal recipient, an approval checklist with expiry dates, an audit cadence, and the register template. Free and ungated; everything runs in your browser.
PIPEDA, Law 25, and Alberta PIPA breach-notification triggers, clocks, and who to notify, in plain language, plus a client-side incident-register generator.
Run a free cybersecurity incident-response tabletop exercise in your browser. Six breach scenarios, timed decisions, and a graded after-action report.
A practical AI governance starter checklist for discovering use cases, classifying risk, setting usage controls, and monitoring AI systems.
A practical PIA and DPIA scoping worksheet for product, privacy, security, and legal teams assessing a new use of personal information.
Bilingual access and correction request letters under PIPEDA and Quebec Law 25, with the correct statutory references. Copy or download; nothing leaves your browser.
Compare the loaded cost of a full-time privacy hire with a fractional privacy officer engagement. Free directional estimates for Canadian teams.
Paste any privacy text and the Jargon Decoder highlights Law 25, PIPEDA, OPC, and CAI terms from the site glossary with plain-language definitions. Free, runs in your browser, embeddable on any site.
Turn any privacy policy into an FDA-style nutrition label: 11 heuristic checks, one letter grade, a shareable card. Free, in your browser, not legal advice.
Ask movahedi.ca
Answers from Mohammad's articles
