Providers
Hosting and providers
Last updated: October 3, 2026
To run the platform, DeepFlow relies on a small number of specialized service providers. This page describes the framework that governs them.
Categories of providers
Each provider falls into one of the following categories and receives only what its function requires:
| Category | Function |
|---|---|
| Hosting and storage | Encrypted storage of file information and of the PDF files produced |
| Application hosting | Running the platform and the forms, and processing requests |
| Artificial intelligence analysis | Sorting uploaded documents and extracting the relevant information, reading lender responses, helping draft compliance notes, qualifying inquiries by text exchange and scoring files |
| Transactional messaging | Sending emails and text messages: qualification, confirmations and reminders |
| Orchestration and technical monitoring | Scheduling reminders and processing, and monitoring that the system is working properly. Some steps carry information extracted from the documents; the artificial intelligence telemetry contains only metadata |
| Technical tracking | Fix tickets opened automatically when an anomaly occurs: file number and error message, with no name or document |
| Support messaging | Receiving technical alerts and requests addressed to DeepFlow |
The main information is hosted in Canada.
The rules imposed on each provider
Each provider is bound by a written agreement that provides, at a minimum:
- No use for its own purposes. The provider may use the information only to deliver its service to DeepFlow.
- No model training. The information is never used to train artificial intelligence models.
- No resale, no advertising. The information is not sold, rented or used for marketing purposes.
- Equivalent confidentiality and security. Encryption at rest and in transit, access limited to what is strictly necessary.
- Incident notification. An obligation to notify DeepFlow without delay of any confidentiality incident.
- Minimization. The provider receives only the category of data its function requires; several of them process only metadata and never access the content of files.
Processing outside Québec
Some services that are ancillary to the operation of the platform are performed outside Québec. Before using such a provider, DeepFlow assesses and documents the sensitivity of the information involved, the purpose of the processing, the contractual and technical protections offered and the applicable legal framework, as required by section 17 of Law 25. Each transfer is governed by a written agreement.
When an option hosted in Canada exists, it is preferred. This is the case for information storage, the database and application hosting. The artificial intelligence analysis is operated from an account located in Canada, but a request may be processed in a region located in the United States. The sending of text messages and emails, as well as task scheduling, is handled by providers located in the United States.
Services managed by the broker
Some tools used in the workflow belong to the broker and operate in the broker’s own accounts: their customer relationship management software, their mortgage software, their inbox and their scheduling tool. Their use and configuration are the broker’s responsibility.
Changes
DeepFlow may add or replace a provider. Brokers bound by an agreement are notified in advance of any significant change and may object to it.
The list of providers by name, with their function and place of processing, is given to each broker with their agreement and remains available on request: deepflow_ai@outlook.com.