// CANADA · LEAD MAGNET
The Canadian AI Agent Governance Scorecard.
15 questions across Law 25 automated decisions, data residency, OSFI-aligned model risk, audit, vendor lock-in, and prompt-injection defense. Every "no" is a gap.
Free PDF, no calls, no spam.
// what's in the scorecard
Six categories, fifteen questions
The same questions a Canadian privacy and model-risk review asks before agents touch production. Score yourself before they do it for you.
Law 25 automated decisions
When an agent makes a decision based exclusively on automated processing, can you inform the individual and let them submit observations — the obligations under Law 25 §12.1 and §14?
Data residency
Does your agent data stay in Canada — ca-central-1, Canada Central, or montréal1 — or does it transit or rest on US-resident infrastructure you can't see?
OSFI-aligned model risk
Do you have a model inventory, validation, and ongoing monitoring your model-risk function can sign off on, aligned to OSFI guidance?
Audit + approvals
Is every agent action logged in a tamper-evident way, and can a human review consequential actions before they execute — or do agents act first and explain later?
Vendor lock-in + portability
Do you own your agent definitions and can you swap the model or provider without a rebuild, or are they trapped in a platform you can't export from?
Prompt-injection defense
Is there anything between untrusted input and a privileged action, or can a crafted message drive your agent?
Sources: Commission d'accès à l'information du Québec — Protection of personal information (Law 25 §12.1, §14); Office of the Superintendent of Financial Institutions — Guidance library (OSFI model risk).
// what happens after you download
No surprises, no drip sequence
An email arrives
We send the download link to the address you give us — usually within a minute. Check spam if it's not there.
You download the PDF
15 questions, scored. Work through it with your team in 20 minutes. Every "no" is a gap to close before your next Law 25 or OSFI review.
An optional follow-up
If you want to talk through your score, we're around. If you don't, you won't hear from us again. No drip sequence, no sales pressure.