Movahedi Solutions
Security Questionnaire Answers
1000823315 ONTARIO INC., operating as Movahedi Solutions, is an independent privacy and AI governance consultancy based in Mississauga, Ontario, Canada. Security contact: mohammad@movahedi.ca. This page gives pre-filled answers to the security questions buyers ask most often. Each answer is limited to what Movahedi Solutions publishes in this Trust Center set. Where a point is engagement-specific, the answer says so, and the tailored-request route below applies.
A note on dates. The third-party header scan cited below is timestamped October 28, 2026, at 00:59 UTC. That is October 27, 2026, at 8:59 p.m. Toronto time, so it falls on the date of this page in Toronto time. No evidence has been backdated.
Printable version. No PDF download file is published for this page. To print this page or save a copy from your own browser: open this page in your browser; press Ctrl+P on Windows or Linux, or Cmd+P on Mac; in the print dialog, choose Print, or choose Save as PDF to save a copy. That print route uses your browser. It is not a site-provided PDF file.
1. Who are you?
1000823315 ONTARIO INC., operating as Movahedi Solutions, is an independent privacy and AI governance consultancy based in Mississauga, Ontario, Canada. Detail: Trust Center.
2. What do you do?
Movahedi Solutions provides: AI Governance; Privacy and Data Governance; Cookie and Script Governance; Process Excellence; Custom AI and Data Solutions; Fractional Advisory. These are services only, not certifications and not a promise of a client outcome. Detail: Capability Statement, October 27, 2026.
3. How do you protect client information?
Client information is used only for its engagement. Access is limited to what the engagement requires. Client material is removed at the end of the engagement, and is returned or deleted on client instruction. Client data is not sold, and client data is not used to train models. Detail: Privacy and Data Handling.
4. How is your website protected?
The public site is served over HTTPS through Cloudflare, and is built and deployed from GitHub. The dated header scan result is on Security Practices.
5. What independent assurance do you publish?
The independent, third-party evidence published in this Trust Center set is the third-party header scan in Question 4. Directory listings, such as the Clutch profile and the Trustpilot page, are public profiles, not assurance. Nothing here is a company certification or an audit. Detail: Third Parties and Certificates.
6. Who do I contact about security?
Contact mohammad@movahedi.ca for security questions, security documentation requests, and security issue reports. No phone number, response time, or service level is stated on this page.
7. Where are your documents?
The Trust Center documents are on the Documents page: Capability Statement, Privacy Notice for Engagements, and Terms of Engagement, each dated October 27, 2026; Security Practices, October 29, 2026; the Website Privacy Policy, last updated October 29, 2026; and the Vendor Security Questionnaire, October 27-29, 2026. Third-party pages linked from this set are the Security Headers scan, the Clutch profile, and the Trustpilot review page. For a document that is not listed, use the request route in Question 12.
8. What certifications do you hold?
The founder's personal credentials are ISC2 Certified in Cybersecurity (CC), CIPP/C, and Lean Six Sigma coursework (LinkedIn Learning, 2022). Those three items are personal credentials of the founder. They are not company certifications, and they must not be read as company certifications. Detail: Certificates.
9. Do you hold insurance or clearance?
Any specific security, screening, or insurance requirement that applies to an engagement is confirmed in writing before work starts, under the Terms of Engagement. No such requirement is assumed from the general terms alone. For an engagement-specific question, use the request route in Question 12.
10. What subprocessors or tools do you use?
For the public site, infrastructure and edge delivery run on Cloudflare (including Cloudflare Pages and Workers) and GitHub (source and build). Depending on the feature you use, the site also uses Google (Gemini Flash model family via Google AI Studio for the Ask widget; Google Workspace for email; consent-gated Google Analytics), Cloudflare Workers AI (Ask widget fallback), Microsoft Clarity (consent-gated analytics), MailerLite (newsletter opt-in and delivery), and Cal.com (discovery call scheduling). Full details are in the Website Privacy Policy. Location is not stated. Engagement tools are agreed per engagement. No engagement tool list is pre-published here, because the tools depend on the engagement. Detail: Security Practices.
11. Do you sell client data or use it to train models?
No. Client data is not sold. Client data is not used to train models. Client information is used only for its engagement, as stated in Question 3. Client material is not publicly named without written permission. Detail: Privacy and Data Handling and FAQ.
12. How do I request a tailored questionnaire response?
Send your request to mohammad@movahedi.ca. In your request, name the questionnaire and state the deadline. No response time is stated on this page. A tailored response is prepared on request through that contact route. This pre-filled page does not replace a tailored response to a buyer questionnaire. For the full 60-question version, see the Vendor Security Questionnaire.
How this works
A buyer reads the pre-filled answers above, checks the linked evidence for the answer that matters to them, and, where the question is engagement-specific, sends a tailored request naming the questionnaire and the deadline. The tailored response is then prepared for that engagement.
Related pages
Scope and limits, stated briefly
Where a matter is to be confirmed per engagement, it is stated as such, and it is confirmed in writing for that engagement before work starts.