/

Companies / Comply+

Comply+ tech stack

complyplus.ca

Comply+ provides FINTRAC reporting software, training, and filing support that turns transactions into validated report-ready drafts and submits them directly to FINTRAC. It serves Canadian compliance teams, including money services businesses, crypto companies, foreign exchange, armoured car, and casino businesses.

Summarized from its homepage on 8 Nov 2026.

Classified asCompliance and riskFintech

The Comply+ homepage

Vendors of Comply+ and the evidence for each

Comply+ declares 12 subprocessors, including AI providers OpenAI.

VendorCategoryEvidenceLevel
NetlifyCloud and infrastructureConfirmed
Subprocessor listNamed as Netlify, Inc. · Processes data for the company8 Nov 2026Source
Privacy policyNamed as Netlify, Inc. · Processes data for the company8 Nov 2026Source
Websiteheader: x-nf-request-id: 01M6XRP9Q0RAJQPPTMZXCEKVYF8 Nov 2026Source
Companies using Netlify
Amazon Web ServicesCloud and infrastructureConfirmed
Subprocessor listNamed as Amazon Web Services (AWS) · Processes data for the company8 Nov 2026Source
Privacy policyNamed as Amazon Web Services (AWS) · Processes data for the company8 Nov 2026Source
Companies using Amazon Web Services
GranolaProductivityConfirmed
Subprocessor listNamed as Granola Labs, Inc. (Granola.ai) · Processes data for the company8 Nov 2026Source
Privacy policyNamed as Granola Labs, Inc. (Granola.ai) · Processes data for the company8 Nov 2026Source
Companies using Granola
JiraProductivityConfirmed
Subprocessor listProcesses data for the company8 Nov 2026Source
Privacy policyProcesses data for the company8 Nov 2026Source
Companies using Jira
OpenAIAI and LLM providersConfirmed
Subprocessor listNamed as OpenAI, L.L.C. · Processes data for the company8 Nov 2026Source
Privacy policyNamed as OpenAI, L.L.C. · Processes data for the company8 Nov 2026Source
Companies using OpenAI
OpenSanctions DatenbankenSecurity and identityConfirmed
Subprocessor listNamed as OpenSanctions Datenbanken GmbH · Processes data for the company8 Nov 2026Source
Privacy policyNamed as OpenSanctions Datenbanken GmbH · Processes data for the company8 Nov 2026Source
Companies using OpenSanctions Datenbanken
PostHogAnalyticsConfirmed
Subprocessor listNamed as PostHog, Inc. · Processes data for the company8 Nov 2026Source
Privacy policyNamed as PostHog, Inc. · Processes data for the company8 Nov 2026Source
Companies using PostHog
ResendEmail and communicationsConfirmed
Subprocessor listNamed as Resend, Inc. · Processes data for the company8 Nov 2026Source
Privacy policyNamed as Resend, Inc. · Processes data for the company8 Nov 2026Source
Companies using Resend
SentryObservabilityConfirmed
Subprocessor listNamed as Functional Software, Inc. (Sentry) · Processes data for the company8 Nov 2026Source
Privacy policyNamed as Functional Software, Inc. (Sentry) · Processes data for the company8 Nov 2026Source
Companies using Sentry
StripePaymentsConfirmed
Subprocessor listNamed as Stripe, Inc. · Processes data for the company8 Nov 2026Source
Privacy policyNamed as Stripe, Inc. · Processes data for the company8 Nov 2026Source
Companies using Stripe

11 more vendors

See Comply+'s full stack and the source for every claim.

Create a free accountWork email, no card. Already have one? Log in

Questions about Comply+

Certifications

StandardWhat the source saysChecked
SOC 2 Type ICompany's statement“SOC 2® Type 1 Report Encryption In Transit & At Rest”The company's own statement. SOC 2 has no public registry; the report itself is shared by the company, usually under NDA.13 Nov 2026Source

We last read its homepage on 13 Nov 2026 and the FedRAMP Marketplace on 8 Nov 2026. A standard not shown here was not found in these sources. That does not mean Comply+ lacks it.

Vendor's own statement, retrieved from the source URL on the date shown. StrataDB does not verify the underlying claim. Data sources.

See Comply+'s full stack

Every vendor with its source and date, and an alert when Comply+ adds or drops one. The same lookup works for any company.

  • Every company and vendor, with its public source
  • 100 API calls a month, plus MCP and the Chrome extension
  • Work email only. No card, no sales call