Valdra/Breach & Incidents

Notify affected individuals
with the right message, fast

PIPEDA requires you to notify affected individuals in plain language, promptly. Our AI generates customized letters for each affected cohort, with translation, delivery tracking, and response logging.

app.valdra.ai/incidents/notification-letters
Incident INC-2026-075
Notification Letters
CRITICAL
OPC Notification Required In
35:23:11
Hours : Minutes : Seconds
Incident Timeline
1. Incident Detected
2. Investigation Started
3. OPC Notification
4. Parties Notified
OPC ReportDRAFT
Organization: Acme Corp
Date of breach: Apr 12, 2026
Individuals affected: 491
Data types: Name, SIN, DOB
RROSH assessment: ✓
Built for Canadian businesses
EN + FRBilingual
🍁Hosted in Canada
PIPEDA · Law 25 · CASLBuilt for Canadian law
24 mo

how long PIPEDA requires you to keep a record of every breach — reportable or not

1 PIPEDA Breach of Security Safeguards Regulations

Start Free Assessment
OPC Breach Notification — Draft
47h 23m left
Incident Summary
Unauthorized access to customer database on April 12, 2026. Approximately 1,200 records including names, emails, and account numbers affected.
Records Affected
1,200
Data Types
Name, Email, Account #
Risk Level
Real Risk of Harm
OPC Report
Required

Report as soon as feasible. Start the clock now.

PIPEDA says to report a breach that creates a real risk of significant harm to the OPC as soon as feasible after you determine it has occurred. The law sets no fixed number of hours. Valdra starts your response clock against a recommended 72 hour internal target, which is not a legal deadline, and walks you through every required step.

Request a demo
Affected Party NotificationTemplate · En/Fr

Subject: Important notice about your personal information

Dear [First Name],

We are writing to inform you of a security incident that may have affected your personal information held by [Company].

What happened: On [Date], we discovered that...

Plain language draft · Review before sending
Breach Response Timeline47h 23m to deadline
Breach detected14:02
Contained15:18
RROSH assessed — reportable16:40
OPC notifiedpending
Individuals notifiedpending

Every letter, every document, generated.

OPC notification letters, affected party notifications, and internal incident reports are drafted from your incident data in plain language, ready for your review in minutes, not hours.

Request a demo

Additional features

Request a demo

OPC Plain Language Standards

Letters are drafted to meet OPC plain language guidance — no legalese, clear description of what happened and what you are doing.

Individual Cohort Personalization

Generate customized versions for different affected groups based on the specific data exposed and their risk level.

Bilingual Generation

All notification letters are produced in both English and French to meet PIPEDA and Law 25 language obligations.

Delivery Channel Management

Track delivery via email, mail, phone, or in-app notification. Confirm delivery and log bounce-backs for regulatory evidence.

Response Capture

Log and respond to individual replies from affected parties. All interactions are time-stamped and linked to the incident record.

Linked to Breach Register

Notification details are automatically captured in your breach register with proof of delivery timestamps.

Get compliant and build trust

Start free, no credit card.

Start Free — No credit card required

🍁 Canadian data residency · PIPEDA readiness · SOC 2 in progress

Our own compliance

We run our own compliance programme inside Valdra — the product we sell. Our SOC 2, ISO 27001 and ISO 42001 programmes are actively in progress; we do not claim certifications we do not yet hold.

Valdra readiness mark, click to verify
  • PIPEDA
  • Law 25 (Quebec)
  • CASL
  • Data hosted in Canada 🇨🇦
  • AI governance
View our Trust Centre

Measured by Valdra from our own assessments, not audited by a third party. Click the mark to open its verify page and see what it covers.