Tools · Privacy · AI governance · Insights
Movahedi.ca is a working library for Canadian privacy and AI governance. It gives privacy, legal, security, product, and AI teams free tools, plain-language coverage of Law 25 and PIPEDA, and regular practitioner analysis in English and French. Start with your question, then use a tool, check a rule, or read the analysis.
Explore the enforcement tracker,about, services, andoutcomes.
Built for privacy, legal, security, product, and AI teams.
Move your pointer across the map. Tools, source material, and analysis stay connected.
Choose from 23 hands-on tools for breach response, data mapping, consent, AI risk, explainability, and governance. Each one turns a live question into a file, score, checklist, or decision you can take back to your team.
Map the data before the meeting starts.
The Data Mapping Field Guide helps you build an inventory, test retention choices, trace a data flow, and export the working file. It covers Quebec Law 25 and PIPEDA, and runs in your browser.
Open the field guideExport it. Open it in the next meeting.
You do not need to know which statute, framework, or control comes first. Start with what you are trying to do.
Run a breach clock, audit a cookie banner, map personal information, test AI explanations, or build a governance checklist.
Follow Quebec Law 25, PIPEDA, OPC findings, CAI guidance, consent, breach response, retention, and cross-border questions.
Work through AI inventories, risk classification, explainability, bias, human oversight, acceptable use, and monitoring.
Read regular practitioner analysis of current Canadian privacy and AI governance issues, in English and French, with the primary source kept close.
03 / Insights
Regular practitioner analysis in English and French. Read the analysis, follow the named source, then use the 333-term glossary when the language gets dense.
The tools are free to use. Client-side tools run entirely in your browser: nothing you type or paste leaves your device. The Cookie Banner Auditor’s URL mode is the exception: it sends only the target URL to a first-party audit endpoint for server-side inspection. Drag through the set, or use the arrow keys when the strip has focus.
Check PIPEDA, Law 25, and Alberta PIPA triggers, clocks, who to notify, and the incident register you need to keep.
Use the calculator ↗Discover AI use cases, classify risk, set usage controls, and plan how each system will be monitored.
Use the checklist ↗Investigate fictional AI incidents, test the evidence, and reach a verdict using patterns drawn from real cases.
Open a case ↗See how SHAP attributions become specific, plain-language reasons for an illustrative credit decision.
Try the generator ↗
Mohammad Movahedi · Mississauga
05 / Reference
Look up the term, open the ruling, test the control, and keep the source close enough to challenge the answer.
Privacy coverage follows consent, access, retention, breach response, vendors, and cross-border data. AI governance coverage follows use-case discovery, risk classification, explainability, bias, human oversight, acceptable use, and monitoring.
06 / Ask
Book a focused discovery call. We will name your highest-risk gaps, figure out whether you need a project, a part-time senior lead, or just a roadmap, and sketch what good looks like in 90 days.
Ask movahedi.ca
Answers from Mohammad's articles
