Cybersecurity in Calgary, without a call centre
Alberta is one of only three provinces with its own private-sector privacy law, and it is the strictest of the three about breaches. If you operate in Calgary, the rules you answer to are not the federal ones most Canadian guidance describes.
What's specific to Calgary
Alberta PIPA requires you to report a breach to the Commissioner wherever there is a real risk of significant harm — Alberta was the first jurisdiction in Canada to make that mandatory, and the duty sits on you, not on your provider. That single obligation is what most changes an incident-response plan written for a federal audience: the report has a recipient and a clock. We scope readiness work around the statute that actually binds you.
| Private-sector law | Alberta PIPA |
|---|---|
| Regulator | Office of the Information and Privacy Commissioner of Alberta |
| Public bodies | FOIP |
| Working overlap | Two hours behind Eastern, so our afternoon is your midday — most of the working day overlaps. |
| Local presence | None — delivered remotely from Gatineau, Quebec |
The engagements most asked for in Calgary
Because the reporting duty is yours and it comes with a clock, we usually start in Calgary with an assessment that establishes what a real risk of significant harm would actually look like in your environment, then an incident-response plan written to name the Commissioner as a recipient rather than a vague "notify the regulator" step.
The services themselves are the same nationwide — what changes is where we start, given what binds you: assessments · Microsoft 365 security · SOC 2 readiness
What we don't do in Calgary: any on-site work. Engagements needing a physical presence — facility inspections, on-premises Wi-Fi testing, physical access testing — are not part of the offering anywhere, including in Ottawa. How we work →
Frequently asked questions
Do you have an office in Calgary?
No. IT Sincennes holds a local presence only in Gatineau, Quebec, and won't pretend otherwise. Engagements in Calgary are delivered remotely over a least-privilege account you create and can revoke yourself: no site visit, no travel billed, and the price does not change with distance. What you do get is the same architect from start to finish, with no handoff to a regional team.
Which privacy law applies to a business in Calgary?
In Alberta, personal information in the private sector is governed by Alberta PIPA, and the body you would answer to is the Office of the Information and Privacy Commissioner of Alberta. Public bodies in the province fall under FOIP instead, which matters if you sell to them — their obligations then reach you through the contract. Note too that federal PIPEDA continues to apply to federally regulated organizations — banks, telecommunications, interprovincial transport — and to personal information moving between provinces.
Is the time difference a problem for a client in Calgary?
Two hours behind Eastern, so our afternoon is your midday — most of the working day overlaps. Anything that could interrupt service is scheduled around your clock rather than ours, and agreed in advance. To be clear, this is not a round-the-clock availability commitment: the platforms and automation we implement run continuously, while human review happens in business hours.
Is French-language service available in Calgary?
Yes. Engagements, reports and correspondence run in French or English at your choice, anywhere in the country — not only in Quebec. It's a working-language question, not a regional one.
A firm for Calgary, remotely
Tell us what you need to solve. The first call is for scoping, not selling.
Get in touch