Trust & data handling
The source boundary, the correction route, and what is excluded.
Every claim on this site rests on an open source. Nothing non-public is used, and some categories are excluded outright. Corrections are free and reviewed by a person.
Source boundary
Only these source classes are used
| Source class | Publisher | Public? | Handling |
|---|---|---|---|
| Canadian Company Capabilities | Innovation, Science and Economic Development Canada | yes | Self-declared by the firm; treated as a claim, never as evidence of capacity. |
| Controlled Goods Program — registration status | Public Services and Procurement Canada | yes | Registration status only. Controlled goods content is out of scope, permanently. |
| CanadaBuys contract history | Public Services and Procurement Canada | yes | Award records establish that work was contracted, not that it was performed to standard. |
| Provincial corporate registries | Nova Scotia RJSC · Service New Brunswick · NL Registry of Companies · PEI Corporate Registry | yes | Legal existence, registered office, and status. Nothing about capability. |
| Accredited certification-body registers | Registrars accredited by the Standards Council of Canada | yes | Certificate scope and expiry are read verbatim. Scope wording matters more than the standard number. |
| Supplier corporate publications | The supplier | yes | Websites, capability statements, and press releases. Self-declared; supports, never establishes. |
| A source class enters scope by being added to a brief’s colophon with its freshness window. Nothing is used that is not listed. | |||
Deliberately excluded
What is never collected
- Controlled goods content
- Permanently. Only public registration status under the Controlled Goods Program is recorded. Nothing about what a registrant makes, holds, or handles is collected, inferred, or stored.
- Non-public and access-controlled sources
- No login-gated database, subscription feed, or clearance-gated system is used. If a source needs a credential, it is out of scope.
- Controlled technical data
- Drawings, specifications, and technical data packages are never requested and are refused if offered.
- Security-clearance and personnel security material
- Never requested; refused if offered.
- Confidential pricing, customer lists, and production schedules
- Never requested; refused if offered.
- Facility vulnerabilities, credentials, or secrets
- Never requested; refused if offered. Report a security concern to the address below without including any of these.
Correction route
How a record is corrected
Accepted in the public form
- A structured description of the correction
- The public source that supports it — a link or a locator
- Non-sensitive supplier information: legal name, address, capability wording
- A request for secure follow-up, describing only the category of evidence, not its contents
What happens next
- 01 You receive a submission reference.
- 02 A reviewer reads the correction against the source you cite.
- 03 If accepted, a new evidence row is appended to the claim, dated, and the brief’s change history records it. The prior row is kept.
- 04 If not accepted, you are told why, with the rationale.
- 05 No account. No fee. No upload. No effect on any status other than what the evidence supports.
This website
How the site itself behaves
- Zero third-party requests
- This website loads no analytics, no tracker, no CDN font, no embedded widget. Every asset is served from this domain. A browser with third-party requests blocked renders it identically.
- No client-side script
- The site ships no JavaScript. Every disclosure and sort works with native HTML and CSS. It functions with script disabled.
- Forms collect what triage needs
- Name, work email, organization, role, and a description. No attachments. A submission is a request for review, not a publication.
- Review before publication
- Every correction and nomination is read by a person. Nothing enters a register automatically. Accepted changes are appended as new evidence rows with a date.
- Retention
- Submission records are kept as long as needed for review, audit history, disputes, or legal requirements, and no longer. Use your submission reference to request an update or deletion.
- Access
- Submission data is limited to the people supporting triage, review, security, and legal duties.
- Security contact
- security@capacitysignal.ca — without sensitive evidence in the first message.
No inflated assurance claims
Capacity Signal does not claim military-grade, classified-ready, Protected B compliant, or Controlled Goods certified status. Security here is demonstrated by what is not collected and by what the site does not load.
Stated limits
What this page does not claim
- 01
No independent security certification is claimed.
Capacity Signal does not describe itself as military-grade, classified-ready, Protected B compliant, or Controlled Goods certified. If any such status is ever independently established it will be stated with the certifying body and date.
- 02
The security contact address must be monitored to be useful.
It is published here on the understanding that it is. If a message to it bounces, treat that as a defect and report it through the general contact route.