Your Gmail.
Now encrypted for Canadian mental health privacy.

No. Curio wraps encryption and a Canadian audit trail around your existing Google Workspace. You keep using Gmail exactly as you do now, with the same inbox, the same address, and the same contacts.

Curio encrypts every email automatically and logs every send in a Canadian audit trail. Built for the statute that actually governs you: PHIPA in Ontario, PIPA in Alberta, PIPA in British Columbia, with PIPEDA as the federal floor. The audit trail is the record that the safeguard was running, so the documentation a regulator would ask for already exists.

Curio's compliance infrastructure, audit logging, and email routing all run on Canadian servers in Montreal, in GCP region northamerica-northeast1. Email delivery itself goes through Gmail, which uses Google's global infrastructure.

No. Most recipients receive encrypted email directly in their inbox without needing portals, plugins, or additional software.

Hushmail runs as a separate secure inbox, so it replaces Gmail rather than working with it, and its own instruction for encrypting a message is to click a toggle. Curio adds encryption and a Canadian audit trail to the Gmail you already use, and it runs on every message automatically. Hushmail's servers are in Canada, and they say all your Hushmail data stays in Canada. Curio can't say that about message content: Gmail still delivers your mail, on Google's global infrastructure. What Curio gives you instead is your existing address, your existing inbox, and an audit trail in Montreal.

Paubox is built for HIPAA. Its published security documentation describes AWS hosting and names no Canadian data residency, no Canadian privacy statute, and no Canadian region.

PHIPA in Ontario, and PIPA in Alberta and British Columbia, all require safeguards appropriate to the sensitivity of the information, including for electronic communications that carry personal health information. In Ontario, the Information and Privacy Commissioner (IPC) issued its first PHIPA administrative monetary penalties in August 2025, and a PHIPA conviction carries a fine of up to $200,000 for an individual and $1,000,000 for an organization, under section 72(2). In Alberta, PIPA requires notice to the Office of the Information and Privacy Commissioner (OIPC) where a breach creates a real risk of significant harm. In British Columbia, PIPA allows the OIPC to order compliance and refer violations. None of these statutes names encryption; each requires appropriate safeguards, and encryption is a widely recognized safeguard for email that carries this information.

Each therapist signs up individually and gets their own encryption and audit trail. Your Workspace admin routes a "Curio Therapists" org unit once, and every therapist inside it is covered. Mailboxes outside that org unit, like reception or billing, are untouched.

No setup fees and no minimum term. The Standard plan is $15 per month per therapist, or pay $180 once for lifetime access. Cancel anytime.

Lifetime access is open ahead of launch. Pay once now and we activate your account at launch. The Standard monthly plan opens at the same time.