Enterprise Readiness
Bizby is purpose-built for enterprise and government teams. This page summarizes our security, compliance, and operational capabilities for procurement and security reviewers.
Canadian Data Residency
Section titled “Canadian Data Residency”All collaboration data is hosted on Canadian infrastructure.
| Component | Location | Provider |
|---|---|---|
| Real-time collaboration | Toronto (yyz) | Fly.io, region-pinned |
| Document storage | Montreal (northamerica-northeast1) | Google Cloud / Firebase |
| AI processing | Canada East | Azure OpenAI |
| Edge delivery | Eastern North America | Cloudflare Workers |
Data residency is configurable per enterprise. Organizations requiring strict Canadian residency can enable it in their admin settings, routing all WebSocket traffic through Toronto.
For full details, see our Security Overview.
Single Sign-On (SSO)
Section titled “Single Sign-On (SSO)”Bizby supports federated identity with your existing identity provider.
Supported protocols:
- SAML 2.0
- OpenID Connect (OIDC)
Tested with:
- Microsoft Entra ID (Azure AD), both SAML and OIDC
- Okta (SAML)
- Auth0 (SAML)
- Any standard SAML 2.0 or OIDC provider
Key capabilities:
- Enforcement on by default for enterprise accounts
- Owner bypass for admin access if your IdP is unavailable
- Auto-provisioning: new users signing in via SSO are added to the enterprise automatically
- Domain verification via DNS TXT record prevents unauthorized domain claims
- Seat limit enforcement with configurable thresholds
- Members’ multi-factor authentication stays with your identity provider; guests can be required to use Bizby two-step verification
Audit Logging
Section titled “Audit Logging”Every significant action in your enterprise is logged and exportable.
What’s logged:
- Authentication: Logins, SSO blocks, seat limit enforcement
- Boards: Creation, renaming, sharing, deletion, restoration
- Members: Invitations, removals, deactivations, role changes
- SSO: Configuration changes, domain verification, user provisioning
- Sub-teams: Creation, updates, membership changes, admin assignments
- Settings and billing: Seat changes, plan updates, invoice events, data residency changes
Features:
- Filter by category, date range, or user
- Paginated view with full history
- CSV export (up to 5,000 entries per export)
- Available to enterprise admins in team settings
Access Controls
Section titled “Access Controls”Board-level roles:
- Owner: Full control including sharing, role management, and deletion
- Editor: Can create and modify content
- Viewer: Read-only access
Enterprise hierarchy:
- Enterprise (parent organization) with centralized admin
- Sub-teams for departmental separation
- Sub-team admins for decentralized management
- Content scoped by sub-team: users only see boards in their assigned team
Guest access (Team+ and Enterprise):
- Email-based guest invitations with per-user permissions
- Guests can be granted editor, commenter or viewer access
- Revocable at any time
- The enterprise owner can turn guests and share links off for the whole organization, and require guests to use two-step verification
Data Portability
Section titled “Data Portability”Bizby is committed to data portability, a requirement for government procurement frameworks.
Export formats:
- PNG: Raster image export
- SVG: Scalable vector export
- PDF: Multi-page PDFs from selected frames, with automatic orientation, board name, date, and page numbers
- Bizby native format: Full board state download (JSON-based)
Board notes can also be exported to PDF independently.
Compliance
Section titled “Compliance”| Framework | Status |
|---|---|
| PIPEDA | Compliant. Data minimization, consent, Canadian residency, encryption, breach notification, individual access rights. |
| Ontario Procurement Restriction Policy | Canadian-headquartered company; Customer Data stored in Canadian regions (see DPA §3.2). Infrastructure providers are US-based, so exposure to the U.S. CLOUD Act cannot be fully excluded (see DPA §3.3). |
| Encryption at rest | AES-256 (Google Cloud default) |
| Encryption in transit | TLS 1.2+ on all connections |
| SOC 2 | SOC 2 Type II report available under NDA. Infrastructure providers (Google Cloud, Cloudflare) hold their own SOC 2 reports. |
| Security questionnaire | Completed and available on request. |
Service Level Agreement
Section titled “Service Level Agreement”| Metric | Target |
|---|---|
| Monthly uptime | 99.5% |
| Page load time | < 5 seconds |
| Real-time sync latency | < 500 milliseconds |
| API response time (p95) | < 2 seconds |
| Board persistence | < 5 seconds |
Service credits apply if uptime falls below target, ranging from 5% (99.0-99.49%) to 30% (below 90%).
Live status. Current availability, uptime history and incident history are published at status.bizby.ca, so the commitment above can be checked against the record rather than taken on trust.
Disaster recovery:
- Recovery Point Objective (RPO): 24 hours
- Recovery Time Objective (RTO): 4 hours
- Board snapshots persisted every 5 seconds during active editing
- Firestore point-in-time recovery: 7-day rolling window
Support
Section titled “Support”| Tier | Availability | Channels |
|---|---|---|
| Standard | Monday-Friday, 9 AM-5 PM ET | |
| Enterprise | Monday-Friday, 8 AM-6 PM ET | Priority email, dedicated account manager |
| Self-service | 24/7 | Knowledge base, in-app help |
Response times (Enterprise):
- P1 (Critical): 1 hour response, 4-hour resolution
- P2 (High): 4 hour response, 1 business day resolution
- P3 (Medium): 1 business day response, 5 business day resolution
- P4 (Low): 3 business day response, 10 business day resolution
Infrastructure
Section titled “Infrastructure”Bizby runs on enterprise-grade cloud infrastructure with no self-managed servers.
- Cloudflare: Edge delivery, DDoS protection, WebSocket routing
- Google Cloud / Firebase: Database and file storage (Montreal region); authentication (global, sign-in identity only, no board content)
- Fly.io: Region-pinned compute for Canadian data residency (Toronto)
- Azure OpenAI: AI processing (Canada East)
All infrastructure providers maintain SOC 2, ISO 27001, and related certifications.
Architecture
Section titled “Architecture”System Overview
Section titled “System Overview”How user data moves through Bizby’s infrastructure. All collaboration content stays on Canadian infrastructure for organizations with data residency enabled.
Canadian Data Residency
Section titled “Canadian Data Residency”Enterprise customers can enable Canadian data residency. When enabled, all real-time collaboration, data storage, and AI processing routes exclusively through Canadian infrastructure.
Getting Started
Section titled “Getting Started”Ready to evaluate Bizby for your organization?
- Enterprise Onboarding Guide: Step-by-step setup
- Security Overview: Detailed security architecture
- Contact us: Request our security questionnaire or schedule a walkthrough