Data that must stay in Canada stays there, and your security authority decides where the agents run.
The short answer on residency
You choose where the agents run, and the contract fixes residency in Canada.
Public-sector and regulated organizations
Governance Sprint
From CAD $30,000, plus GST/HST.
10 business days, ending in a signed go/no-go.
Knowledge Agent Pilot
From CAD $85,000, plus GST/HST.
6 weeks, gated weekly, ending in a production decision with evidence.
Managed AgentOps
From CAD $12,000 a month, plus GST/HST.
6-month minimum.
A small public team under a low-dollar authority can start with the Diagnostic: CAD $5,000, 2 weeks, plus GST/HST.
What a public-sector team gets
- Data residency
In Canada, written into the contract.
Default region: AWS Canada (Central), Montréal, which holds its own Protected B (PBMM) authorization.
- Ownership
Canadian owned and controlled.
WhiteGlove Labs AI Ltd., Ottawa. Three founders.
- Security screening
Reliability Status for the organization.
Designated Organization Screening, granted by the Canadian Industrial Security Directorate on 2 September 2026. Screened staff work on Protected information inside your environment; it never reaches our premises.
- Contracting
PSPC AI Source List, Band 3.
We are qualified in Band 3 (EN578-180001/B), confirmed by Public Services and Procurement Canada on 24 August 2026.
- Routes
Your contracting authority decides the route.
We shape the work to fit the shortest route you already hold.
See the routes
- Subcontract
- A Canadian prime holding a federal supply arrangement can carry the work; we confirm prime, vehicle and ceiling in writing.
- Sources
- The PSPC Artificial Intelligence Source List and the solutions-based supply arrangement.
- Human approval
A named person approves what an agent produces.
The agent retrieves, drafts and classifies; that person decides.
- Language
English or French, your choice.
Alexander Leslie leads French engagements, and every written deliverable comes in your language. French official or legal text goes to an independent qualified reviewer, a priced variable.
- Reviews
Input for your reviewers.
We run the Directive on Automated Decision-Making screen with your authorities. Your institution decides whether an Algorithmic Impact Assessment applies.
Before your review
Read security and governance, the answers for reviewers and the deployment playbook. See all services.