Canadian HR software. Built here, hosted here, run here.
Designed around Canadian employment law from the first line of code. Hosted at Microsoft Azure Canada Central. 100% Canadian-owned, based in Oakville, Ontario.
What “Canadian” means here
Six things, all load-bearing. None of these are optional features; they are how the product is built.
Built by Canadians, in Canada
100% Canadian-owned and operated. Founded 2025 in Oakville, Ontario. Every feature is designed by people who grew up paying CPP, filing T4s, and reading ESA notices, not by a US team that bolts Canada on as a setting.
Hosted in Canada at Azure Canada Central
Employee and payroll data lives in Microsoft Azure Canada Central. SINs and banking details are protected with AES-256-GCM field-level encryption on top of TLS 1.2+ in transit. The full technical details are on the security page.
Canadian employment law as the baseline
CPP and CPP2 with the YMPE / YAMPE tiers. EI to the federal MIE. ESA termination, severance, and vacation pay tracked per province. Statutory holiday pay using the right formula per jurisdiction. CRA-ready T4 internet filing. Service Canada ROE Web filing. None of this is an add-on.
PIPEDA at the architecture level
Privacy by design, not as a checkbox. Schema-per-tenant isolation keeps each customer's data in its own Postgres schema. HttpOnly cookie auth blocks the most common XSS attack vector. Audit logging captures who touched what and when.
Provincial coverage from line one
Every Canadian province and territory has its own ESA. Vacation pay accrues at different rates in BC and Saskatchewan. Overtime kicks in after 8 hours in Alberta but only after 44 in Ontario. Stat-holiday formulas vary by province. The product handles all of it without you having to remember which row applies.
Quebec coverage in audit, not in production
The Quebec engine (RRQ, RQAP, Quebec income tax, FSS, CNESST, Relevé 1, equity, Loi 25 alignment) is built and in independent legal and linguistic audit before launch. We will not enable Quebec for a customer until that audit is complete. Join the Quebec waitlist to be notified at launch.
Why this is not just a flag on the website
Four specific things US-built HR tools get wrong in the Canadian market.
A US tool with a Canada checkbox does not handle CPP2
CPP2 is the 4.00% second-tier contribution on earnings between the YMPE ($74,600 in 2026) and the YAMPE ($85,000). Many imported US payroll engines either skip it, apply the wrong rate, or treat it as part of base CPP. Hibiscus HR computes CPP2 as a separate tier with its own ceiling and remits to CRA correctly. Same goes for QPP2 in Quebec.
ESA termination and severance are different rules per province
Ontario's s.57 termination notice (1 week per year of service, 8-week cap) is different from BC's notice schedule, which is different from Alberta's. Then Ontario layers an additional s.64 severance entitlement above $2.5M payroll or 50+ in mass term. The product tracks the right rule for the right province automatically. The free ESA termination calculator shows the math per province.
ROE Web filing is the Canadian Service Canada protocol
Record of Employment is a Canadian instrument with its own codes (E, M, K, A, N, etc.), its own insurable-earnings reporting rules, and its own filing endpoint at Service Canada. A US tool with no ROE support sends Canadian HR admins to ROE Web manually, which is the workflow Hibiscus HR replaces.
T4 internet filing is the CRA protocol
T4 XML follows CRA's specific schema. Box 14, 16, 17, 18, 24, 26, 28, 44, 52. Each box has a CRA-defined meaning, and box 16 is CPP-only while QPP goes in box 17. T4 generators that collapse the two produce slips CRA will not reconcile. Hibiscus HR generates schema-correct T4 XML for direct CRA filing.
Where your data lives
The data-residency deep-dive. What stays in Canada, the three cross-border exceptions, and the retention policy.
/canadian-data-residency →Security details
AES-256-GCM, HttpOnly cookie auth, strict CSP, breached-password protection, PCI-DSS via Helcim, role-based access.
/security →Le Québec s’en vient
The Quebec engine is built and in independent legal and linguistic audit. Join the waitlist for launch notification.
/quebec →Run your HR in Canadian.
Stop translating CPP, ESA, and T4 to a US platform. Hibiscus HR speaks them as first-class concepts.