AI compliance infrastructure for Canadian municipalities.
Your staff are already using artificial intelligence. LUMINARYX™ gives you the structure to govern it: decision documentation, regulatory compliance mapping, approval workflows, and a tamper-evident audit trail. When a provincial regulator asks what your municipality did to govern AI, this is the record you hand them. Built for the CAO who has to defend those decisions at the council table.
The governance gap
Staff are already using AI. They draft reports with ChatGPT, analyze data with Copilot, and explore tools they found on their own. In most municipalities, this is happening without policy, without oversight, and without a paper trail.
Banning AI does not make a municipality safer. It drives use underground, increases liability, and ensures the productivity gains other communities are capturing pass yours by.
Regulation is not waiting. Ontario's Bill 194, British Columbia's FIPPA, Quebec's Law 25, and the federal Treasury Board Directive are all moving toward requiring public organizations to govern their use of artificial intelligence. The question is not whether your municipality will need to demonstrate compliance. It is when.
What LUMINARYX™ does
Decision register. Every AI-related decision is recorded, classified by risk, routed for approval, and logged to a tamper-evident audit trail.
Compliance mapping. Seven Canadian regulatory frameworks. Forty-five requirements. Your decisions mapped against the rules that apply in your province.
Maintained as the rules change. Canadian regulatory frameworks and ISO standards are versioned and updated centrally. When the rules shift, your compliance mapping is updated through the platform, not through a re-implementation.
Contractor accountability. Third-party AI use is declared through a structured portal, scored against four accountability areas, and linked to your governance record.
Configurable to your municipality. Upload your own policies. Create and customize decision templates to fit your operating context.
Delegation, when the CAO chooses. The CAO can grant time-bound permissions to specific staff for specific scopes, such as managing users or managing decisions, without giving up oversight. Every decision still rolls up to a single municipal record.
Staff capability building. Structured documentation doubles as practical training. Staff learn safer AI use through the act of recording and reviewing decisions.
Bilingual by design. Full English and French support, including Quebec French terminology, because governance does not stop at provincial borders.
Briefings
Public-record analysis of how artificial intelligence is appearing in the software Canadian municipalities already use, and what the governance gap looks like in practice. Sourced, dated, and offered as a contribution to municipal practice. Read the latest briefing.
Built for Canadian municipalities
If your governance tool runs on AI, who governs the governance tool? LUMINARYX is fully deterministic. The same input always produces the same output, with no model behaviour to explain to council. No machine learning in the governance engine, ever.
Instead, it guides your team through structured assessments and produces a hash-chained audit trail of every decision, every assessor, every rule applied.
Hosted in Canada
AWS ca-central-1, Montreal. Your records stay under Canadian jurisdiction and Canadian privacy law.
Audit-ready
Cryptographic hash chains on every record. Any tampering after the fact is mathematically detectable.
Your data stays yours
Client-side document redaction. Documents never leave your device. Personal information is stripped in your browser before any AI model sees it, so the unredacted data never leaves your network.
Pricing
All features included. Pricing reflects the scale of your governance, not access to functionality.
We publish because we think municipalities deserve to know what governance costs before they spend an hour on a sales call. Pricing is population-based, not per seat, so your whole organization can use the platform without counting logins. Your neighbouring municipality pays the same rate for the same population band. That's part of the fairness commitment.
Included in every tier
About
LUMINARYX was founded by Joy Guyot, a sitting councillor for the Town of Golden and a developer who built the platform from inside her own active council term.
Before launching LUMINARYX, Joy created iQuiki Kiosk, a self-service hardware and cloud platform designed for campground operations. Her background is in building practical, working systems, not advising on them.
By 2025, AI was ready to move into municipal work, but the policy direction to govern it wasn't. In conversations with local government colleagues across Canada, the same gap kept surfacing: no clear guidance was coming.
LUMINARYX was built to close that gap. It's the only Canadian municipal AI governance platform built by someone with both direct council-table experience and the technical expertise to design and deploy the software, because municipalities need governance tools created by people who understand how local government actually operates in practice, not in theory.
LUMINARYX™ is a trademark of 17691190 Canada Inc. Joy Guyot is a member of the International Association of Privacy Professionals and an Associate Member of MISA BC.
Frequently Asked Questions
Is a municipal AI governance policy legally required in Canada?
Not as a single named law, not yet. But municipalities are already bound by provincial privacy legislation, records and retention requirements, and the basic duty to make documented, defensible decisions. The moment AI shapes a decision that affects residents, the test is not whether you had a policy. It is whether you can show how the decision was made and who stood behind it. Governance is how you pass that test, whether or not a statute ever names it.
What happens if an AI-assisted decision turns out to be wrong?
A municipality is not expected to be infallible. It is expected to be able to account for its choices. The thing that protects you is a record, often called a decision register, that shows what the AI contributed, what a person judged, and why the call was reasonable at the time. With that, a wrong outcome is a defensible decision that did not pan out. Without it, the same outcome looks like negligence. Governance is the difference between those two stories.
Who is accountable when a municipality uses AI to support a decision?
Ultimately, the organization. AI use is an institutional responsibility, not a liability dropped on whichever staff member touched the tool. What governance adds is a clear, traceable path: the register records who used the AI, what a person judged, and that the municipality's defined process was followed. When the process was followed and the record shows it, the decision is defensible and the people who made it are protected. The question that matters is "did we follow our process," and with the register in hand you can always answer it. That is also why open, recorded use is the safe path and quiet, undocumented use is the risk.
How is AI governance different from an AI policy?
A policy states intentions. Governance produces evidence. A policy says the municipality will use AI responsibly. Governance is the operating machinery that makes each decision actually follow through, and captures the proof that it did. A binder on a shelf is a policy. A record you can hand to an auditor is governance.
Will AI governance slow our staff down, or just add bureaucracy?
Not if it is built to warn rather than block. Heavy governance gates every action behind approvals and teaches staff to route around it. Good governance flags only the decisions that carry real exposure, asks for a brief recorded judgment there, and stays out of the way everywhere else. It also has to be safe to use. If recording a judgment is a light step rather than a confession, staff actually do it, and the trail stays honest instead of going underground. The aim is a defensible record, not a brake.
Is municipal data kept in Canada?
Yes. Data is hosted in Canadian infrastructure. For municipalities that matters because provincial privacy law and resident expectations treat Canadian data residency as a baseline, not a premium feature.