The answers to your questions, up front
For your IT team and your privacy officer.
Developed in Quebec.Hosted in Quebec.
That is the application under Loreeya. Here is plainly what stays here, and what goes through outside services.
Where is it?
The platform's server is in Canada, in OVHcloud's data centre in Beauharnois, Quebec. Accounts, progress and logs stay there.
Who else handles it?
Postmark, a US email service, sends the sign-in codes: only the email address and the code go through it.
How do people sign in?
With a code sent to their work email, with no password to remember. Signing in with your organization's Microsoft account is planned, with your IT team.
Are you certified?
Not at this time, and we prefer to say so. Our privacy impact assessment is being prepared.
The site and the platform are two different things
The loreeya.com site
It sets no cookies, does not measure its audience and has no form. It goes through Cloudflare, a US service that protects and speeds it up, which handles your IP address to route your visit. One exception: if you ask to see the available times on the meeting page, it loads the calendar of Calendly, a US service.
Does anything depend on Microsoft 365?
No. Videos, data and accounts live on the server, not in your tenant.
Do you sell or rent personal information?
No.