Privacy incident response

Last updated: October 30, 2026 · Version 1.0 · Document no. 60

1. What we do

As soon as an incident is suspected (unauthorized access, loss, sharing by mistake), we take steps to reduce the risk, assess the harm and record the incident in the register.

2. Notice

If the incident presents a risk of serious injury, we promptly notify the Commission d’accès à l’information and the people affected, as the law requires.

3. Report a problem

Write to entrepontsmontreal@gmail.com with the subject "Incident". For a technical vulnerability: /.well-known/security.txt.

Questions: entrepontsmontreal@gmail.com · Written answer within 1 business day. See also the Trust centre and the legal documents.