Canada · Federal ATIP

ATIP for federal institutions — access, privacy, and AI in one platform

AccessPoint manages Access to Information Act and Privacy Act requests and the Algorithmic Impact Assessments required by the Treasury Board Directive on Automated Decision-Making — pre-configured for the Government of Canada and running inside your own tenant.

Start Free Trial Request a Demo

Canada — Federal at a glance

Response deadline
30 calendar days from receipt
Extensions
Permitted under s. 9 — large volumes, consultations, third-party notice
Application fee
$5 (search and preparation fees waived under current policy)
Algorithmic Impact Assessments
Mandatory for automated decision systems (TBS Directive)
Oversight
Information Commissioner (order-making) and Privacy Commissioner of Canada
Languages
Bilingual — English and French

Built for Canada — Federal

One platform for the whole access-and-privacy mandate, pre-configured for this regime and running in your own Microsoft 365 tenant.

ATIA and Privacy Act requests

Two regimes, one configuration — the 30-day statutory clock, s. 9 extensions, the federal exemption and exclusion catalogue, and records ready for the order-making Information Commissioner, all on Microsoft 365.

Algorithmic Impact Assessments

Complete the AIA required before an automated decision system goes into production — impact scoring and tiering, section delegation to experts, review, and a published, audit-trailed result.

Privacy Impact Assessments

Run PIAs aligned with the Treasury Board privacy policy — screeners, questionnaires, an embedded risk register, and a regulator-ready summary export.

Privacy breach management

Handle privacy breaches under the Privacy Act with containment, real-risk-of-significant-harm assessment, and a live notification checklist for the Privacy Commissioner and affected individuals.

Bilingual by default

Every interface element, notice, letter, and template is available in English and French, meeting Official Languages obligations out of the box.

Statistical reporting

Generate the annual access and privacy statistical reports federal institutions must table, from timeliness brackets and templates configured for the federal regime.

The Directive on Automated Decision-Making

Every automated decision system needs an Algorithmic Impact Assessment. AccessPoint runs it.

The Treasury Board Directive on Automated Decision-Making requires federal institutions to complete an approved Algorithmic Impact Assessment and publish the results before an automated decision system is put into production. AccessPoint runs the AIA on the same engine as your Privacy Impact Assessments — scored, tiered, reviewed, and captured on a hash-chained audit trail — so responsible-AI governance lives beside your ATIP program instead of in a separate spreadsheet.

Mandatory AIAs Impact scoring and tiering for automated decision systems, ready to publish.
TBS-aligned PIAs Privacy Impact Assessments on the same governed platform.
Audit-ready evidence A hash-chained ledger and court-ready evidence packages across every module.

Configured out of the box

Installing the ca-fed-atip configuration pack seeds your tenant with everything this regime needs — a starting point you can adjust, not a lock-in.

Related guide: FOI Workflow Quick Check
  • The Access to Information Act and Privacy Act as the legal-authority spine
  • The federal statutory-holiday calendar and 30-day due-date rules
  • The ATIA exemption and exclusion catalogue, colour-coded for redaction
  • Section 9 extension reasons with citations and limits
  • Requestor fee categories for the federal regime
  • Information Commissioner complaint grounds and dispositions
  • Federal timeliness brackets and the statutory statistical-report templates
  • Bilingual (English/French) correspondence and notification templates

Canada — Federal Questions

Does AccessPoint cover both the Access to Information Act and the Privacy Act?
Yes. The federal configuration ships both regimes in one pack — ATIA access requests and Privacy Act personal-information requests — with their shared 30-day clock, section 9 extensions, exemption catalogues, and the order-making Information Commissioner and the Privacy Commissioner reflected in the complaint workflows.

Can it run the Algorithmic Impact Assessment required by the TBS Directive?
Yes. AccessPoint's assessment engine runs Algorithmic Impact Assessments end to end — impact scoring and tiering, section delegation, review, and a published result — on the same platform as your Privacy Impact Assessments, with a full audit trail suitable for the Directive on Automated Decision-Making.

Is the platform fully bilingual?
Yes. AccessPoint ships bilingual (English/French) and every interface element, notice, letter, and template can be presented in either language, supporting Official Languages requirements for federal institutions.

Where does federal data reside?
Entirely within your own Microsoft 365 and Azure tenant. Requests, documents, assessments, and audit history never leave your control — no third-party cloud, no vendor access, and no cross-border data transfers.

Run ATIP, Privacy, and AI Assessments in One Platform

Try AccessPoint free for 30 days, pre-configured for the Government of Canada. No credit card required.

Start Free Trial