v1.2.0 - PIPEDA, Quebec Law 25 & AICPA SOC 2 Type II Compliance

pipedact v1.2.0 — Privacy-as-Code & Continuous Compliance Suite

We are excited to announce pipedact v1.2.0, an open-source static analysis engine and continuous compliance suite for Canadian Federal/Provincial privacy laws and AICPA SOC 2 Type II criteria.

🌟 Key Features & Improvements

• Canadian PIPEDA Schedule 1 Gate: Comprehensive automated checks covering all 10 Fair Information Principles.
• AICPA SOC 2 Type II Support: Automated testing for Common Criteria (CC6.1, CC6.6, CC6.7) and Privacy Criteria (P1.1–P5.1).
• Canadian SIN Luhn Mod-10 Validator: Verifies 9-digit Canadian Social Insurance Numbers and detects hardcoded/logged values.
• Multi-Framework Cross-Mapping: Cross-walks findings between PIPEDA, SOC 2 Type II, ISO/IEC 27701, and Quebec Law 25.
• Hybrid AI Semantic Privacy Reasoning: Built-in deterministic statutory reasoner plus Gemini, OpenAI, and local Ollama support.
• Auditor Evidence Pack & Dossier Generation: Exports SARIF 2.1.0 for GitHub Code Scanning, Markdown compliance dossiers, and SOC 2 Type II evidence registers.
• Automated Remediation (--fix): Auto-masks PII in application log sinks and inserts affirmative consent guards.

📦 Installation

go install github.com/theterminalguy/pipedact@v1.2.0

🧪 Sample Application

Explore the companion test repository: theterminalguy/pipedact-sample-app