Why tonia exists.

AI is evolving exponentially. Vendors and businesses struggle to keep up. tonia exists to close that gap — on your hardware, under your laws; starting in Canada, where Bill 25 sets the highest bar.

Concretely: tonia simplifies AI governance for Canadian businesses. tonia filters, audits, and reviews every AI request your firm makes. Choose your starting profile: Sovereign or Frontier. Then choose the bundle that fits your needs. Your employees need AI to stay competitive; your privacy officer needs to prove every use. tonia makes both possible.

Three things, plainly.

1. Compliance isn't a feature.

It's the architecture. Claiming Bill 25 compliance without a register of what leaves, why, and with what consent pushes the risk onto your legal team. Frontier models have their place; you need a layer that frames every egress. tonia is that solution: every request classified, logged, and routed only when your policy allows.

2. Your competitive edge shouldn't feed a general-purpose model.

Without control, the data used in these tools can feed a general-purpose model beyond the file at hand. The terms of service often allow it, and it's easy to miss day to day. The issue isn't geography; it's what you allow to leave. tonia is that solution: on-site space where your knowledge stays yours, and tonia to decide, request by request, what may leave.

3. An AI that helps make decisions should be able to prove what it said, to whom, based on what.

Today, no other enterprise AI on the market can. ChatGPT, Claude, Copilot, Gemini. They all operate as oracles. You ask, they answer, and if six months from now someone asks "why did the model suggest that?", the honest answer is "we don't know; we didn't keep the trace." tonia keeps the trace in the local audit log your team controls. That's a change of category.

What that means in practice

Since September 22, 2023, if personal information leaves Canada, you must be able to prove why: PIA, assessed recipient, transfer contract, and incident register. Penalties can reach CA$25M or 4% of worldwide revenue. Many teams use ChatGPT or Copilot without that file in place.

These tools do not create that file for you. If an employee pastes a client file into them, information can leave the organisation without clear proof of what left, for whom, why, and when.

The rule is simple: every transfer outside Canada needs a legal basis. Sending every request to a US provider cannot be your default setting.

tonia gives you two profiles. Sovereign: sensitive data stays on your on-site node. Frontier: approved requests go to a frontier model, with policy, redaction, and audit. In both cases, you keep a clear log of what was allowed.

Our scope

  • The local model serves your internal use cases. We do not present it as a general-purpose frontier model.
  • tonia is an internal tool for your teams. Its architecture and governance rules are calibrated for that scope — internal use, not customer-facing chat.

What we hold ourselves publicly accountable to

  • Frontier profile recommended to start. tonia filters, redacts, and audits every request from activation. Add the Sovereign profile when sensitive data must execute on-site. Browse our bundles.
  • Included PIA template. Ready to adapt to your architecture.

Who it's for

tonia is for every business using AI today. For organisations that want AI's productivity lift without giving up the governance they spent a decade building.

If you're still here

You can:

Or simply write to us — bonjour@tonia.ca. We are friendly.

tonia — Québec, Canada. So your AI stays yours.