For the public sector and non-profits
Microsoft + Canada hosting + SEAO. No misunderstandings.
For Quebec municipalities, RCMs, non-profits, public bodies and the healthcare network. We know your regulatory framework — Treasury Board terms, AMP, Canada hosting, accessibility, bilingualism.
Managed Microsoft cybersecurity
io4 SOC 24/7 and Defender XDR: detection and incident response for uninterrupted public services.
SEAO and AMP experience
A method for responding to public RFPs, Treasury Board terms, AMP above $1M.
Canada-only hosting
Microsoft Azure Canada Central (Toronto) and Canada East (Quebec) regions. Data residency in Canada.
Three families of organizations we serve.
Municipalities and RCMs
Microsoft 365 modernization, Defender XDR security, transparency and digital services for citizens.
Healthcare network and non-profits
Canada East (Quebec) hosting, health-information management, enhanced PIAs.
Public bodies
Treasury Board framework, AMP, web accessibility (WCAG), institutional bilingualism.
Our regulatory rigor
What you should never have to negotiate with an IT partner.
- Exclusive Canada Central / Canada East hosting depending on sensitivity
- Managed cybersecurity: Defender XDR, 24/7 monitoring and incident response
- Complete SEAO responses: bid security, AMP, Revenu Québec attestation, Treasury Board format
- WCAG 2.1 AA accessibility on all web deliverables
- Institutional bilingualism: FR/EN deliverables on request
- Enhanced contractual confidentiality clauses
- Documented subcontractors with location and compliance
- Defender XDR cybersecurity - aligned with public insurers' expectations
Four programs aligned with your constraints.
Law 25 compliance
Audit of the 11 obligations, 6-to-20-week compliance plan, privacy-officer support, sample PIAs, incident register.
See detailsio4 SOC - 24/7 security
Continuous Defender XDR monitoring, compliance with public-sector cybersecurity requirements, audit-ready reports.
See detailsMicrosoft 365 modernization
Migration from on-premise Exchange to M365 Canada Central, Teams, SharePoint, institutional document governance.
See detailsData and Purview governance
Personal-information mapping, Purview labeling, DLP tailored to sector requirements.
See detailsAn RFP in progress? A project to scope?
We'll call you back within 1 business day with an informed perspective.
Frequently asked questions
Frequently asked questions from the public sector.
Can't find your answer? write to us.
Yes. io4 has won several Quebec public RFPs since 2020, including mandates requiring an AMP (authorization to contract for contracts ≥ $1M). We're fluent in Treasury Board general terms, bid-security requirements, the Revenu Québec attestation and the SEAO response format. We publish a dedicated white paper on the topic.
For public-sector mandates, we systematically operate in the Microsoft Canada Central (Toronto) or Canada East (Quebec) regions. For health information and especially sensitive data, Canada East is preferred. Transfer assessments (Law 25, Article 17) are documented in each PIA. Microsoft 365 defaults to Canada Central.
Yes. Any interface delivered under a public-sector mandate meets WCAG 2.1 level AA minimum, in line with Quebec's accessibility legislation (in preparation) and SCT directives. We run accessibility audits before delivery and train internal editors to maintain compliance.
Three main differences: (1) a senior architect knows your mandate end to end, not an interchangeable team; (2) we refuse the over-commitments that lead to overruns (strict scoping before firm pricing); (3) our human scale allows real adaptation to your organization's culture — not a standardized process deliverable recycled from one client to the next.
Since 2019 we've supported several healthcare non-profits (250 to 500 employees) with specific expertise in managing personal health information, partnership agreements with MSSS / CIUSSS, and the specific requirements of public funders. Our PIAs account for the specifics of the sector.
Yes, in the vast majority of cases. We have an external legal team that reviews each RFP, and we sign SCT general terms without modification for nearly all contracts. The rare adjustments requested typically concern intellectual-property clauses on pre-existing methodologies.
30 minutes to frame what matters.
A direct conversation with one of our experts. No commitment, no sales pitch. You leave with a clear, reasoned perspective on your situation.

