Your Gmail.
Now PHIPA compliant.

Curio encrypts every client email, enforces consent, and keeps your data in Canada. Your Gmail stays the same.

Start now No setup fees, cancel anytime

PHIPA PIPEDA CPSO IPC

Curio enforces what PHIPA, PIPEDA, CPSO, and IPC require. Not as a feature you configure, but as infrastructure that runs every time you hit send.

How it works

Connect your Google Workspace

Link your Gmail account. Takes under two minutes. Nothing changes about how you send and receive email.

Every email is encrypted

AES-256 at rest, TLS 1.3 in transit. Automatic for every client message. No plugins, no portals for most recipients.

Compliance runs at runtime

Consent directives are enforced and every access is logged. Your data stays in Canada. You focus on seeing clients.

What makes Curio different

Not another portal.

Most "compliant email" solutions force you off Gmail entirely. Hushmail gives you a new inbox. Curio wraps compliance around the tools you already use. Your Gmail stays your Gmail.

Canadian from the architecture up.

Curio isn't a US product with a Canadian flag on the marketing site. Paubox encrypts but stores nothing in Canada. Curio keeps your data in Montreal and Toronto. Consent engine built for PHIPA. Jurisdiction-aware rules that know the difference between Ontario, BC, and Alberta requirements.

Compliance you never configure.

No toggle pages. You won't run an annual compliance checklist. The product enforces the rules at runtime. Encryption happens. Consent is tracked. Audit logs are written. If you notice the compliance layer, we've failed.

The regulatory window is closing.

The IPC issued its first PHIPA Administrative Monetary Penalties in August 2025. The CPSO requires encryption for all patient email. The IPC's January 2026 AI guidance means unmodified Gmail now has additional compliance exposure. These aren't future risks. They're current requirements.

Start now

Infrastructure specifications

Built to be verified, not believed

Data residency

Montreal & Toronto

northamerica-northeast1
northamerica-northeast2

Encryption

AES-256 & TLS 1.3

At rest. In transit.
Not configurable.

Consent engine

Jurisdiction-aware

Automatic enforcement
Lock-box directives

Pricing

Simple pricing. Everything included.

Standard

$15 /mo

per therapist

Automatic encryption for every client email
Canadian data residency (Montreal & Toronto)
Consent engine with lock-box directive support
Immutable audit trail (10-year retention)
No setup fees, cancel anytime

30-day money-back guarantee

Best value

Lifetime

$180 one-time