Movahedi Solutions

Frequently Asked Questions

1000823315 ONTARIO INC., operating as Movahedi Solutions, is an independent privacy and AI governance consultancy based in Mississauga, Ontario, Canada. Contact: mohammad@movahedi.ca. These answers are limited to facts published in this Trust Center set. For an engagement-specific question, contact mohammad@movahedi.ca.

Find an answer without email first

Start here, then the Security Questionnaire Answers for twelve pre-filled answers, then the Vendor Security Questionnaire for sixty questions in twelve categories. For anything not published there, use the Document Request page, or contact mohammad@movahedi.ca naming the document or questionnaire and the deadline. Buyer pathways by need are on the Buyer Pathways page, service-by-service coverage is on the Services Coverage page, and regulation mappings are on the Regulatory Mappings page.

Who are you and what do you do?

1000823315 ONTARIO INC., operating as Movahedi Solutions, is an independent privacy and AI governance consultancy based in Mississauga, Ontario, Canada. Services: AI Governance; Privacy and Data Governance; Cookie and Script Governance; Process Excellence; Custom AI and Data Solutions; Fractional Advisory. Detail: Capability Statement, October 27, 2026.

How do you protect client information?

Client information is used only for its engagement. Access is limited to what the engagement requires. Client material is removed at the end of the engagement, and is returned or deleted on client instruction. Detail: Privacy and Data Handling.

Do you sell client data or use it to train models?

No. Client data is not sold. Client data is not used to train models. Detail: Privacy and Data Handling.

Is your website secure?

The public site is served over HTTPS through Cloudflare, and is built and deployed from GitHub. The dated header scan result is on Security Practices.

What independent assurance do you publish?

The independent, third-party evidence published in this Trust Center set is described on Security Practices. Directory listings, such as the Clutch profile and the Trustpilot page, are public profiles, not assurance. Detail: Third Parties.

What subprocessors or tools do you use?

The vendors are listed in the Subprocessor Transparency Table, which separates website infrastructure (Cloudflare, GitHub) from services that receive personal information (Google Workspace for email, MailerLite for the newsletter, Cal.com for scheduling). Not every infrastructure vendor receives personal information. Engagement tools are agreed per engagement. Detail: Security Practices and Services Coverage.

Are you registered on procurement portals?

The portals and profiles in this Trust Center set are: UNGM, MERX, CanadaBuys / SAP Ariba, Ontario Tenders, LinkedIn Services, Catalant.

Do you hold certifications, insurance, or clearance?

Personal credentials of the founder, which are not company certifications: ISC2 Certified in Cybersecurity (CC); CIPP/C; Lean Six Sigma coursework (LinkedIn Learning, 2022). Any specific security, screening, or insurance requirement that applies to an engagement is confirmed in writing before work starts, under the Terms of Engagement. See the Certificates page for the full statement.

Do you name clients or publish case studies?

No client is named in this Trust Center set. No case study, reference, testimonial, or logo is published in this Trust Center set. Client material is not publicly named without written permission.

What happens to client material at engagement end?

Client material is removed at the end of the engagement. It is returned or deleted on client instruction. Detail: Privacy and Data Handling.

Can I request security documentation?

Yes. Contact mohammad@movahedi.ca and name the document you are requesting, or use the Document Request page. The Trust Center documents are on the Documents page. Third-party pages linked from this set are the Security Headers scan, the Clutch profile, and the Trustpilot review page.

How do I request a tailored questionnaire response?

Send your request to mohammad@movahedi.ca. Name the questionnaire and state the deadline. No response time is stated here. The pre-filled Security Questionnaire Answers page does not replace a tailored response to a buyer questionnaire.

What technology runs movahedi.ca?

The public site is an Astro static site, built and deployed from GitHub, served over HTTPS through Cloudflare by the Cloudflare Worker movahedi-ca. Search uses a Tier 1 index plus Pagefind full-text search at /search/. The Privacy API is REST at /api/v1, live and read-only, with 10 enforcement actions, 333 glossary terms, 11 Law 25 checks, 202 cookie patterns, and 51 crawlers, per the live health response on October 28, 2026. The MCP server offers 11 read-only tools at /mcp. The Personal Agent Protocol (Poppy) version 0.2 uses the same read-only API and MCP with no sign-in sessions. A free API key is issued via a Cloudflare Turnstile challenge plus API terms acceptance, shown once, never stored on the site side, with no account or email needed. This stack covers movahedi.ca only and does not store engagement data. Detail: Infrastructure: public site stack, movahedi.ca/developers, and movahedi.ca/api/v1/health.

How do I report a security issue?

Use the Security Issue Report form, which prepares an email to mohammad@movahedi.ca in your own email program, or send your report to mohammad@movahedi.ca with what was observed, the page affected, and the date and time. Detail: Responsible Disclosure.

How do I request a document?

Send your request to mohammad@movahedi.ca and name the document you are requesting, or use the Document Request page. If you have a deadline, state it in your request.

Scope and limits, stated briefly

For an engagement-specific question, contact mohammad@movahedi.ca.