Law 25 and AI Email: How to Choose a Compliant Tool in Quebec (2026)

2026-03-20 · Alexandre Sauvageau

Loi 25 & AI email: 5 red flags in non-compliant vendors, 7 criteria for compliant tools, and 6 questions to ask before you sign. Quebec Law 25 guide.

Using an AI email assistant in Quebec? Under Loi 25, your vendor processes personal data on your behalf — making you liable for their compliance. Here are the 5 red flags to spot and the 7 criteria every compliant AI email tool must meet.

Why your email inbox is personal data under Loi 25

5 Loi 25 red flags to spot in any AI email vendor

7 criteria a Loi 25-compliant AI email tool must meet

6 questions to ask any AI email vendor before you sign

Loi 25 doesn't prohibit using AI email tools. It sets a clear standard for how they must be built and how vendors must behave. The seven criteria and six questions above are your complete vendor evaluation framework. Any AI email tool that meets all seven — Canadian data residency, no model training, signed DPA, named Privacy Officer, 24h breach SLA, human review before sending, and data deletion on request — can be deployed in a Loi 25-compliant workflow. Agentys was built to that standard. If you're currently using a tool that can't answer those six questions in writing, you're carrying legal exposure that a single client complaint could activate.