labs@atheron:~/industries/municipalities/compliance$ audit --controls --evidence

Municipal compliance

Accessibility, and Protected B where it applies.

A municipal service has to work for every resident, and some municipal systems handle information under federal programs with their own security rules. We build to the controls and support your audit; certification and attestation reports are issued by independent auditors, and authorizations are your own decision.

Start a project See the example projects

// what matters here

What is different in this industry.

Built to WCAG 2.1 AA

Accessibility is designed in and tested with screen readers, keyboards and real users, with an accessibility conformance report you can give procurement.

Your province's accessibility rules

Ontario, British Columbia, Manitoba and others set their own accessibility requirements. We build to the standard your accessibility lead names; we do not give legal advice.

Protected B scope, where it applies

When a system handles Protected B information under a federal program, we work through the scope with your security team and build to the controls agreed.

Independent audits

We support an independent accessibility audit and your security assessment with documentation and evidence. Neither is issued by us.

// example projects

Priced examples for this service.

Each one is hypothetical, labelled as such, and priced live from our rate card. Open any of them in the estimator and make it yours.

Example projectWeb appMobile app

Permits, inspections and bylaws

Hypothetical. Not a client, not a result.

// The problem

A growing town takes building and development permits by PDF, books inspections by phone, and runs bylaw files in a cabinet, so staff retype everything and applicants cannot see progress.

// What we would build

An online portal where residents and builders apply, pay and track permits, an iOS and Android app inspectors and bylaw officers use offline in the field, and a staff workspace on the town's property and GIS data, built and tested to WCAG 2.1 AA.

// What is in it

Applications, documents and fees online, with status the applicant can follow
Inspection booking, results and photos from the field app, offline
Bylaw complaints, files, notices and tickets in one place
Property and zoning data from GIS and the assessment roll
Records kept to the municipality's retention schedule
Accessibility built and tested to WCAG 2.1 AA, with audit readiness support

// Stack

Next.js
React Native
PostgreSQL with PostGIS
ArcGIS REST API
Payment processor's hosted checkout
AWS Canada

// estimate

Build: ≈ US$186,000 to US$285,000, delivered within 34 weeksCAD 265,200 to 405,700
Hosting: ≈ US$492 a monthCAD 700 a month
Support: ≈ US$2,500 a monthCAD 3,565 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

Timeline by milestone

Discovery: 2.9 to 3.4 weeks
Design approved: 8.4 to 14.9 weeks
Core features: 2.4 to 3.4 weeks
Full build: 1.4 to 2.4 weeks
First build on devices: 4.4 to 7.4 weeks
Testing and fixes: 0.4 to 0.9 weeks
Store submission: 0.4 to 0.9 weeks
Retention rules checked with your records manager: 0.9 weeks
Controls built and evidenced: 0.9 weeks
Readiness review: 0.9 weeks
Launch: 0.9 to 1.4 weeks

Outside our hands, and added to the calendar

App store review: 1 week
Payment processor setup and PCI questionnaire: 2 to 6 weeks
GIS and property data access: 1 to 4 weeks

How it is paid

Deposit 20%: CAD 53,040 to 81,140
Discovery 6.4%: CAD 16,972.80 to 25,964.80
Design approved 6.4%: CAD 16,972.80 to 25,964.80
Core features 5.3%: CAD 14,055.60 to 21,502.10
Full build 3.5%: CAD 9,282.00 to 14,199.50
First build on devices 14.1%: CAD 37,393.20 to 57,203.70
Testing and fixes 1.7%: CAD 4,508.40 to 6,896.90
Store submission 4.7%: CAD 12,464.40 to 19,067.90
Retention rules checked with your records manager 7%: CAD 18,564 to 28,399
Controls built and evidenced 7%: CAD 18,564 to 28,399
Readiness review 7%: CAD 18,564 to 28,399
Launch 6.9%: CAD 18,298.80 to 27,993.30
Holdback, 30 days after launch (10%): CAD 26,520 to 40,570

Start from this example

Example projectWeb appMobile appAIOpen-source model

311 requests with an assistant

Hypothetical. Not a client, not a result.

// The problem

A city takes 311 requests by phone, email and social media, logs them in a spreadsheet, and its call centre answers the same questions about garbage days and parking all day.

// What we would build

A 311 web and mobile app where residents report issues with a photo and a location, routing to the right crew, status updates back to the resident, and an assistant on an open-source model hosted in Canada that answers from the city's published pages and creates requests for staff to accept.

// What is in it

Requests with photo and map location, from the web or the app
Routing to departments and crews, with status sent back to the resident
Field crews close requests from their phones, with a photo
An assistant that answers from published pages and links its source
An open-source model served in a Canadian region in the city's own account

// Stack

Next.js
React Native
PostgreSQL with PostGIS
Llama or Mistral (open-source)
vLLM
AWS Canada

// estimate

Build: ≈ US$216,000 to US$330,000, delivered within 41 weeksCAD 307,600 to 470,200
Hosting: ≈ US$7,020 a monthCAD 10,000 a month
Support: ≈ US$2,500 a monthCAD 3,565 a month

Prices in your currency are estimates from today's Bank of Canada rate. All invoicing is in CAD or USD.

AI route: Open-source model
Model running cost: ≈ US$6,530 a monthCAD 9,300 a month

Timeline by milestone

Discovery: 3.5 to 4 weeks
Specification and evaluation plan: 0.5 weeks
Design approved: 8.5 to 14.5 weeks
Core features: 1.5 to 3 weeks
Full build: 1 to 1.5 weeks
First build on devices: 3 to 5 weeks
Working pilot: 5.5 to 9.5 weeks
Testing and fixes: 0.5 to 1 weeks
Store submission: 1 to 1.5 weeks
Retention rules checked with your records manager: 1.5 to 3 weeks
Launch: 1 to 1.5 weeks
Production: 1 to 1.5 weeks

Outside our hands, and added to the calendar

App store review: 1 week
GIS and property data access: 1 to 4 weeks

How it is paid

Deposit 20%: CAD 61,460 to 93,980
Discovery 4%: CAD 12,292 to 18,796
Specification and evaluation plan 6.1%: CAD 18,745.30 to 28,663.90
Design approved 4%: CAD 12,292 to 18,796
Core features 3.3%: CAD 10,140.90 to 15,506.70
Full build 2.2%: CAD 6,760.60 to 10,337.80
First build on devices 8.7%: CAD 26,735.10 to 40,881.30
Working pilot 18.5%: CAD 56,850.50 to 86,931.50
Testing and fixes 1.1%: CAD 3,380.30 to 5,168.90
Store submission 2.9%: CAD 8,911.70 to 13,627.10
Retention rules checked with your records manager 8.7%: CAD 26,735.10 to 40,881.30
Launch 4%: CAD 12,292 to 18,796
Production 6.5%: CAD 19,974.50 to 30,543.50
Holdback, 30 days after launch (10%): CAD 30,730 to 46,990
GPU time for training and testing, at cost: CAD 300. Billed up front, at cost, outside the milestones

Start from this example

// questions

Questions we get about this.

Can you certify our website as accessible?

No one certifies WCAG conformance officially. We build and test to WCAG 2.1 AA, and an independent accessibility auditor can review it if you want a third-party report.

Does a municipality need Protected B?

Only for information that falls under it, usually through a federal program or agreement. Your security team and your advisers decide the classification; we build to it.

Can you prepare our privacy impact assessment?

We provide the system description, data flows and controls the assessment needs. Your privacy officer writes and owns the assessment.

Back to the industry: Municipalities About the service: Compliance and security engineering

// next

Not quite your project?

Tell us what you have in mind. We will come back to you with a range and the questions that would narrow it. Or book a call and talk it through.

Start a project Book a call