Skip to content
AtheronLABS

You're visiting from the United States. Prices are shown in US dollars. Not right?

labs@atheron:~/industries/government/compliance$ audit --controls --evidence

Government compliance

Protected B and accessibility, built in from the start.

Provincial and federal systems come with a security classification and accessibility obligations. We design for the classification from the start, keep data in Canada, build to WCAG 2.1 AA, and support the security assessment your department runs before authorizing the system.

Start a projectSee the example projects

// what matters here

What is different in this industry.

01

Classification-aware design

Data handled according to its classification, with Protected B scope worked through with your security team before the build.

02

Accessibility to WCAG 2.1 AA

Built and tested to WCAG 2.1 AA, with an accessibility conformance report for procurement.

03

Canadian data residency

Hosting, backups and every service provider in Canadian regions, documented for your assessors.

04

Help with assessment and authorization

We provide the documentation and evidence your security assessment asks for; authorization is your department's decision.

// example projects

Priced examples for this service.

Each one is hypothetical, labelled as such, and priced live from our rate card. Open any of them in the estimator and make it yours.

Example projectWeb app

Municipal permits and licences

Hypothetical. Not a client, not a result.

// The problem

Building permits and business licences are applied for on paper or by emailed PDF, fees are paid at the counter, and applicants call to ask about status.

// What we would build

An accessible web portal where residents and businesses apply, upload plans, pay fees and follow each application, with a staff console for review, comments and approvals, connected to the existing permitting and finance systems.

// What is in it

  • Guided applications that ask only what applies to the applicant's case
  • Plan and document upload with checks before submission
  • Online fee payment through the municipality's processor
  • Status, comments and requests for more information in one place
  • A staff console for review, circulation to departments and approval
  • Built to WCAG accessibility guidelines, in English and French

// Stack

  • Next.js
  • PostgreSQL
  • Permitting system integration
  • Payment processor API
  • AWS Canada

// estimate

Build
≈ US$140,000 to US$214,000, delivered within 27 weeksCAD 199,300 to 304,800
Hosting
≈ US$492 a monthCAD 700 a month
Support
≈ US$5,010 a monthCAD 7,135 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery
2.9 to 3.4 weeks
Design approved
5.9 to 10.4 weeks
Core features
3.4 to 5.9 weeks
Full build
2.4 to 3.9 weeks
Testing and fixes
0.4 to 0.9 weeks
Controls built and evidenced
0.9 weeks
Readiness review
0.9 weeks
Launch
0.9 to 1.4 weeks
Audit support and remediation
0.9 to 1.4 weeks

Outside our hands, and added to the calendar

Onboarding with the identity service
1 to 4 weeks
Procurement and privacy review
4 to 12 weeks

How it is paid

Deposit 20%
CAD 39,860 to 60,960
Discovery 5.4%
CAD 10,762.20 to 16,459.20
Design approved 5.4%
CAD 10,762.20 to 16,459.20
Core features 16.3%
CAD 32,485.90 to 49,682.40
Full build 10.8%
CAD 21,524.40 to 32,918.40
Testing and fixes 5.4%
CAD 10,762.20 to 16,459.20
Controls built and evidenced 7%
CAD 13,951 to 21,336
Readiness review 7%
CAD 13,951 to 21,336
Launch 5.4%
CAD 10,762.20 to 16,459.20
Audit support and remediation 7.3%
CAD 14,548.90 to 22,250.40
Holdback, 30 days after launch (10%)
CAD 19,930 to 30,480
Start from this example
Example projectWeb appBlockchain

Verifiable licences and permits

Hypothetical. Not a client, not a result.

// The problem

Printed licences and certificates are easy to copy, and anyone who needs to check one has to phone or email the issuing office.

// What we would build

Licences and permits issued as verifiable credentials the holder keeps on their phone, signed by the government, with a permissioned ledger operated by participating public bodies that lists issuers and revocations so anyone can check one in seconds. If only one office issues and checks, a signed database record is simpler.

// What is in it

  • Credentials issued to the holder's digital wallet when a licence is granted
  • Revocation and expiry visible to every verifier immediately
  • A permissioned ledger of issuers and revocations, with no personal data on it
  • A verification page and app for businesses and other agencies
  • Open standards, so the credential works with other wallets and governments

// Stack

  • Hyperledger Aries
  • Hyperledger Indy (permissioned)
  • W3C Verifiable Credentials
  • Next.js
  • AWS Canada

// estimate

Build
≈ US$129,000 to US$198,000, delivered within 32 weeksCAD 184,100 to 281,500
Hosting
≈ US$492 a monthCAD 700 a month
Support
≈ US$2,500 a monthCAD 3,565 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery
2.9 to 3.4 weeks
Architecture
0.4 weeks
Design approved
2.9 to 4.9 weeks
Core features
1.9 to 2.9 weeks
Full build
0.9 to 1.9 weeks
Devnet
3.4 to 5.4 weeks
Testing and fixes
0.4 weeks
Testnet
2.9 to 3.4 weeks
Controls built and evidenced
2.9 to 3.4 weeks
Readiness review
2.9 to 3.4 weeks
Launch
0.9 to 1.4 weeks
Mainnet
0.9 to 1.4 weeks

Outside our hands, and added to the calendar

Onboarding with the identity service
1 to 4 weeks
Security assessment and penetration test
2 to 4 weeks
Procurement and privacy review
4 to 12 weeks

How it is paid

Deposit 20%
CAD 36,820 to 56,300
Discovery 1.9%
CAD 3,497.90 to 5,348.50
Architecture 5.2%
CAD 9,573.20 to 14,638.00
Design approved 1.9%
CAD 3,497.90 to 5,348.50
Core features 5.9%
CAD 10,861.90 to 16,608.50
Full build 3.9%
CAD 7,179.90 to 10,978.50
Devnet 15.7%
CAD 28,903.70 to 44,195.50
Testing and fixes 1.9%
CAD 3,497.90 to 5,348.50
Testnet 10.4%
CAD 19,146.40 to 29,276.00
Controls built and evidenced 7.7%
CAD 14,175.70 to 21,675.50
Readiness review 7.7%
CAD 14,175.70 to 21,675.50
Launch 1.9%
CAD 3,497.90 to 5,348.50
Mainnet 5.9%
CAD 10,861.90 to 16,608.50
Holdback, 30 days after launch (10%)
CAD 18,410 to 28,150
Start from this example

// questions

Questions we get about this.

Can you host Protected B data?

We scope Protected B work with your security team, including which hosting is acceptable. Authorization to operate is granted by your department, not by us.

Do you hold security clearances?

We will discuss clearance requirements for any project that needs them; we make no claim to hold clearances we do not have.

Will the system be accessible?

We build and test to WCAG 2.1 AA and provide an accessibility conformance report; an independent audit can be added.

Back to the industry: Government and public sectorAbout the service: Compliance and security engineering

// next

Not quite your project?

Tell us what you have in mind. We will come back to you with a range and the questions that would narrow it. Or book a call and talk it through.

Start a projectBook a call
Protected B scope and accessibility engineering for government | Atheron Network Labs