21 available · 13 on the roadmap

Connect Valdra
to your entire stack.

AI discovery, SSO, cloud, CRM, HR, and Canadian tools — synced to your AI-governance and privacy posture. Built for Canadian teams.

Connect your tools API Docs

Connection methods

Three ways to connect — pick what fits your team.

SSO & SCIM

Enterprise

SAML 2.0 and OIDC single sign-on with SCIM user provisioning and deprovisioning. Works with Okta, Microsoft Entra, Google, or any standards-based identity provider.

  • SAML 2.0 + OIDC
  • SCIM provisioning
  • Okta / Entra / Google
  • Per-org configuration

REST API

API-key

API-key access to your compliance data: readiness score, breach status, DSAR status, and CASL unsubscribe checks. Hashed keys with per-plan rate limits.

  • API-key auth
  • Readiness & breach endpoints
  • CASL unsubscribe check
  • DSAR status lookup

Embed Widgets

No-code

Drop-in scripts for your own site — a CASL consent widget and a Law 25 cookie-consent banner that record timestamped consent straight into Valdra.

  • CASL consent widget
  • Cookie-consent banner
  • Timestamped records
  • One-line embed

AI Governance

3 live · 2 beta
Claude (Anthropic)Live

The AI engine inside Valdra — powers assessments, AI document drafting, the Copilot, and every agent check. PII is anonymized via Shielk before it ever reaches the model.

Google Workspace🇺🇸Beta

Discover shadow AI — scans Workspace OAuth grants to surface the third-party and AI apps your employees connected, ready to promote into your AI registry.

Microsoft 365Beta

Discover shadow AI across Microsoft 365 — scans Entra app grants and service principals for connected AI tools.

S
Shielk🇨🇦Live

Valdra's sister product — anonymizes PII before any document reaches an AI model. 244 Canadian entity types, fully reversible.

CM
Claude MCP ServerLive

Query your compliance posture, vendor risk and AI registry, log breaches and open DSARs from Claude Desktop or Claude Code — 11 tools via @canuckt/valdra-mcp on npm.

Identity & SSO

4 live
Okta🇺🇸Live

SAML 2.0 & OIDC single sign-on plus SCIM user provisioning and automatic deprovisioning.

Microsoft Entra IDLive

OIDC single sign-on and SCIM provisioning for Azure AD / Entra identities.

Google SSOLive

OIDC single sign-on with your Google Workspace identities.

AS
Any SAML / OIDC IdPLive

Bring any SAML 2.0 or OIDC provider — SP metadata, signature validation, and SCIM included.

Cloud & Data

5 live · 1 beta · 2 coming
Amazon Web Services🇺🇸Live

Discover S3 data and map it to your ROPA, flag non-Canadian regions and CLOUD Act exposure — and collect SOC 2 evidence (encryption, IAM, CloudTrail).

P
PostgreSQLLive

Read-only scan — sample columns, classify Canadian PII via Shielk, and populate your data map automatically.

M
MySQLLive

Read-only PII discovery scan straight into your ROPA.

M
MongoDBLive

Document-store PII discovery across collections and top-level fields.

GitHubLive

SOC 2 evidence connector — branch protection, signed commits, Dependabot alerts, and CODEOWNERS.

DropboxBeta

Map Dropbox shared folders containing personal data to your ROPA, with shared-folder risk scoring.

MA
Microsoft AzureQ3 2026

Discover personal data in Azure Blob, SQL, and Cosmos DB with Canadian vs. US residency flags.

GC
Google CloudQ3 2026

Data discovery across BigQuery, Cloud SQL, and GCS buckets with PII classification.

CRM & Marketing

1 live · 2 beta · 2 coming
Mailchimp🇺🇸Live

API-key sync — mirror Mailchimp unsubscribes straight into the CASL Consent Center.

HubSpot🇺🇸Beta

OAuth sync — CASL consent mirroring and DPA / ROPA flags from your HubSpot contacts.

Salesforce🇺🇸Beta

OAuth sync — contact and lead consent records with DPA and ROPA flags.

KlaviyoQ3 2026

CASL express-consent tracking and suppression-list sync with the Valdra Consent Center.

Zoho CRMQ4 2026

Consent record sync and DPA auto-generation for Zoho CRM data processors.

HR & People

1 live · 2 coming
H
Humi🇨🇦Live

Canadian HRIS — sync active employees into your workspace and auto-assign privacy training. PIPEDA pre-assessed.

BambooHR🇺🇸Q3 2026

Map employee data categories to your ROPA and trigger PIAs when new HR data is added.

WorkdayQ4 2026

Employee data mapping, PHIPA readiness for health plans, and retention-schedule automation.

Communication

1 live · 1 beta · 2 coming
SlackBeta

OAuth — pull workspace users for shadow-AI and employee discovery, plus compliance and breach-countdown alerts.

BE
Brevo (Email)Live

All transactional email — magic-link login, e-sign requests, and conversion nudges — over secure SMTP.

T
TwilioQ4 2026

SMS consent records, CASL compliance for text campaigns, and opt-out queue management.

S
SendGrid🇺🇸Q3 2026

Transactional email consent mapping and a CASL audit trail for outbound campaigns.

Canadian Tools

0 live · 5 coming
FreshBooks🇨🇦Q3 2026

Map client billing data in your ROPA. Canadian-first: PIPEDA compliance pre-assessed.

Clio (Legal)🇨🇦Q3 2026

Law-firm client data mapped to PIPEDA and Law 25, with matter-level consent and PIA triggers.

JA
Jane App🇨🇦Q4 2026

Health-practice client data — PHIPA readiness and PIPEDA consent for Canadian clinics.

K
Koho🇨🇦Q4 2026

Fintech data-processor mapping with FINTRAC flags and PIPEDA pre-assessment.

Wave Accounting🇨🇦Q4 2026

Financial data mapping and a PIPEDA ROPA for small Canadian businesses.

Full connector catalogue

85+ integrations

Every tool connects in one click via secure OAuth or a read-only key — no engineering required. Hosted in Canada.

GitHubAvailable

Source control — branch protection & change-management evidence

GitLabAvailable

Source control — branch protection & change-management evidence

BitbucketAvailable

Source control — branch protection & change-management evidence

Amazon Web ServicesAvailable

Cloud infrastructure — encryption, IAM & audit-log evidence

DigitalOceanAvailable

Cloud infrastructure — encryption, IAM & audit-log evidence

Google WorkspaceAvailable

SSO, MFA & user-access evidence

Microsoft Entra IDAvailable

SSO, MFA & user-access evidence

OktaAvailable

SSO, MFA & user-access evidence

JumpCloudAvailable

SSO, MFA & user-access evidence

OneLoginAvailable

SSO, MFA & user-access evidence

KandjiAvailable

Device & endpoint — encryption, MDM & patch evidence

Microsoft IntuneAvailable

Device & endpoint — encryption, MDM & patch evidence

CrowdStrikeAvailable

Device & endpoint — encryption, MDM & patch evidence

SentinelOneAvailable

Device & endpoint — encryption, MDM & patch evidence

Sophos CentralAvailable

Device & endpoint — encryption, MDM & patch evidence

DatadogAvailable

Monitoring, alerting & incident evidence

SentryAvailable

Monitoring, alerting & incident evidence

PagerDutyAvailable

Monitoring, alerting & incident evidence

OpsgenieAvailable

Monitoring, alerting & incident evidence

StatuspageAvailable

Monitoring, alerting & incident evidence

CloudflareAvailable

Network & security-posture evidence

OpenAIAvailable

AI governance — access, usage & model evidence

AnthropicAvailable

AI governance — access, usage & model evidence

Google GeminiAvailable

AI governance — access, usage & model evidence

ElevenLabsAvailable

AI governance — access, usage & model evidence

ReplicateAvailable

AI governance — access, usage & model evidence

BambooHRAvailable

HR — onboarding/offboarding & access evidence

GustoAvailable

HR — onboarding/offboarding & access evidence

RipplingAvailable

HR — onboarding/offboarding & access evidence

DeelAvailable

HR — onboarding/offboarding & access evidence

HiBobAvailable

HR — onboarding/offboarding & access evidence

ADPAvailable

HR — onboarding/offboarding & access evidence

PaychexAvailable

HR — onboarding/offboarding & access evidence

GreenhouseAvailable

HR — onboarding/offboarding & access evidence

LeverAvailable

HR — onboarding/offboarding & access evidence

NamelyAvailable

HR — onboarding/offboarding & access evidence

Sage HRAvailable

HR — onboarding/offboarding & access evidence

XeroAvailable

Finance — vendor & data-processing inventory

FreshBooksAvailable

Finance — vendor & data-processing inventory

StripeAvailable

Finance — vendor & data-processing inventory

SquareAvailable

Finance — vendor & data-processing inventory

RampAvailable

Finance — vendor & data-processing inventory

BrexAvailable

Finance — vendor & data-processing inventory

ShopifyAvailable

Commerce — customer-data inventory (ROPA)

Lightspeed RetailAvailable

Commerce — customer-data inventory (ROPA)

BigCommerceAvailable

Commerce — customer-data inventory (ROPA)

HubSpotAvailable

CRM — consent & customer-data mapping

SalesforceAvailable

CRM — consent & customer-data mapping

PipedriveAvailable

CRM — consent & customer-data mapping

Zoho CRMAvailable

CRM — consent & customer-data mapping

GongAvailable

CRM — consent & customer-data mapping

OutreachAvailable

CRM — consent & customer-data mapping

ClioAvailable

CRM — consent & customer-data mapping

WealthboxAvailable

CRM — consent & customer-data mapping

ZendeskAvailable

Support — customer-data inventory & access

IntercomAvailable

Support — customer-data inventory & access

FreshdeskAvailable

Support — customer-data inventory & access

FreshserviceAvailable

Support — customer-data inventory & access

FrontAvailable

Support — customer-data inventory & access

Help ScoutAvailable

Support — customer-data inventory & access

KustomerAvailable

Support — customer-data inventory & access

KlaviyoAvailable

Marketing — consent & suppression-list sync

MailgunAvailable

Marketing — consent & suppression-list sync

BrevoAvailable

Marketing — consent & suppression-list sync

ZoomAvailable

Communication — access & data inventory

CalendlyAvailable

Communication — access & data inventory

BoxAvailable

File storage — sensitive-data discovery

Google DriveAvailable

File storage — sensitive-data discovery

LookerAvailable

Analytics — data-processing inventory

Microsoft Power BIAvailable

Analytics — data-processing inventory

FigmaAvailable

Design — access & data inventory

JiraAvailable

Work management — change & approval evidence

AsanaAvailable

Work management — change & approval evidence

ClickUpAvailable

Work management — change & approval evidence

AirtableAvailable

Work management — change & approval evidence

BasecampAvailable

Work management — change & approval evidence

NotionAvailable

Docs & e-sign — policy & agreement evidence

ConfluenceAvailable

Docs & e-sign — policy & agreement evidence

ContentfulAvailable

Docs & e-sign — policy & agreement evidence

Dropbox SignAvailable

Docs & e-sign — policy & agreement evidence

PandaDocAvailable

Docs & e-sign — policy & agreement evidence

DocuSignAvailable

Docs & e-sign — policy & agreement evidence

ChargebeeAvailable

Finance — vendor & data-processing inventory

PaddleAvailable

Finance — vendor & data-processing inventory

SquarespaceAvailable

Commerce — customer-data inventory (ROPA)

🚀

More integrations ship every sprint. Azure, Google Cloud, Klaviyo, and BambooHR are on the roadmap — request yours below.

AI Governance — Shadow-AI discovery

Find the AI your team uses but never told you about.

Connect Google Workspace or Microsoft 365 and Valdra scans the AI apps your employees have authorized — surfacing shadow AI, scoring it by risk, and letting you promote sanctioned tools into your AI registry in a click.

Google WorkspaceMicrosoft 365Shadow-AI scanRisk scoringPromote to registry
Explore Shadow-AI Discovery
Live · Professional and Enterprise plans

“Hey Claude, what are our PIPEDA gaps?” — MCP Server

A Model Context Protocol server for Claude Desktop, Claude Code, or any MCP-compatible client: query your compliance scores, vendor risk, and AI system registry, log breach incidents, and open access requests — in natural language. Install “@canuckt/valdra-mcp” from npm with your Valdra API key.

Don’t see your tool?

We’re adding integrations every sprint. Tell us which tool matters most and we’ll prioritize it.

Request an integration
Integrations — Valdra | Canadian Privacy Compliance | Valdra