Government of Canada · Public sector

Teach a government application without its data ever leaving Canada.

Tuti Tuti records tutorials on the workstation that makes them, from a written script, and keeps the account in Montréal. No footage, no page content, and no personal information reaches a server, Canadian or otherwise.

Built for the way departments buy and the way they are audited

A department that needs training videos for an internal or citizen-facing application has two problems: producing them, and explaining to a privacy and security review where the recordings and the data went. Tuti Tuti answers the second one by design. The recording is made in the maker’s own browser and saved to their own Downloads folder. The only things on our servers are the account, the licence, and a count of exported seconds, held in Google Cloud’s Montréal region, which the Canadian Centre for Cyber Security has assessed as a cloud provider. There is no dataset of your application to protect because none is collected.

What a privacy and security review will ask, answered

The short version; the data map has the rest.

01

Residency

Firestore, Cloud Functions, and the site's server run in northamerica-northeast1 (Montréal). The one transfer, the sign-in directory holding name and email, is documented and limited.

02

No screen content on servers

Tuti Tuti never uploads footage, page text, scripts, or screenshots to us. Optional AI checks use keys you hold, or Chrome's on-device model, which never leaves the machine.

03

Privacy blur during recording

Names, emails, phone numbers, and chosen regions are blurred before the recorder sees them, so training can be made on a real environment safely.

04

Accessibility of the output

Word-synced captions and narration written for a listener who cannot see the screen, so videos work with the sound off and with screen readers.

05

Procurement-ready

A seat per author, yearly, by purchase order and invoice in Canadian dollars with GST or HST itemised, under the low-dollar-value threshold. Terms under Ontario law.

06

Managed Chrome

Deployable by extension ID through Chrome enterprise policy once the Web Store listing is live; an install guide names the permissions it needs and why.

Privacy Act · PIPEDA · Law 25

Written to the laws that apply to you.

The privacy policy follows PIPEDA’s ten fair-information principles and Quebec’s Law 25 requirements, with a named person in charge of personal information. For federal institutions, the design keeps personal information out of our systems entirely, which is the simplest answer a Privacy Impact Assessment can have.

From request to running tutorials

1

Ask for the data map and a quote

One page on what is collected, where it lives, and what never leaves the workstation, plus a quote in CAD.

2

Pilot on one application

A licence per author. Write the script in plain English or French, rehearse once, export per chapter.

3

Roll out by policy

Allow the extension by ID in Chrome policy and give authors the script guide.

Government of Canada: the questions departments ask

Where is the data stored, and is any of it outside Canada?
Account records are in Google Cloud's Montréal region. Recordings, scripts, and tutorials stay on the author's workstation. Sign-in is ours and lives in the same region; there is no third-party user directory. The only transfers are Google confirming an identity when someone chooses Sign in with Google, and Stripe for payments, and neither holds any application content.
Is Tuti Tuti assessed for Protected B?
Tuti Tuti holds no departmental information, so there is nothing of yours at Protected B on our side. The application content it records stays on the workstation, under your own controls. Google Cloud, where the account lives, is assessed by the Canadian Centre for Cyber Security for Protected B workloads. We provide a data map for your assessment.
Can we buy it with a purchase order?
Yes. A yearly seat per author, invoiced in Canadian dollars with taxes itemised, net thirty, against a purchase order. Volume pricing for departments is available on request.
Does it work in French?
Scripts and narration can be written in French today and the matcher finds French labels on a French interface. A French version of the panel and the site is in progress.
Can we run it on an application that is only on our network?
Yes. It runs in the author's Chrome on any page that Chrome can open, including intranet and VPN-only applications. Nothing about the page is sent to us.
What about accessibility requirements for the videos?
Every video has word-synced captions drawn on screen, and the narration names every control with its location and speaks every typed value, so the audio alone is a complete guide. Keep a text version alongside for search and for screen readers; the script is that text.

Training videos a privacy review can sign off in one reading.

Write to hello@tutituti.ca for the data map and a quote in Canadian dollars.

Tuti Tuti - powered by Pandacat.