Canadian IoT engineering and audited security for your most critical projects
When data protection and control over where your data lives are non-negotiable, Amotus brings together Fundamentum, a proprietary IoT platform designed and operated by a Canadian team, and security credentials you can verify: registration in the Government of Canada’s Controlled Goods Program and a SOC 2 Type II audit. Whether your project involves defense, critical infrastructure, or any sector demanding the highest level of trust, Fundamentum and the Amotus team are ready to deliver.
Controlled Goods Program Registration
Amotus and Groupe Vectanor are registered in the Government of Canada’s Controlled Goods Program (CGP). The program, administered by Public Services and Procurement Canada (PSPC), authorizes registered organizations to examine, possess, and transfer controlled goods and technology related to defense and national security.
Registration is required for Canadian organizations that examine, possess, or transfer controlled goods, which many defense contracts involve.
SOC 2 Type II Audit
Groupe Vectanor, Amotus’ parent company, holds a SOC 2 Type II report issued by RCGT and dated April 15, 2026, covering security, availability, and confidentiality, and Fundamentum is within the scope of that audit. A Type II audit, conducted according to criteria defined by the American Institute of Certified Public Accountants (AICPA), confirms that controls operated effectively over a period of time — not just that they exist.
A SOC 2 Type II report is particularly relevant for clients operating in regulated sectors — healthcare, energy, defense, government — who must demonstrate that their technology providers meet verifiable security standards. It can be shared with qualified prospects under a non-disclosure agreement; your own compliance remains yours to demonstrate.
Fundamentum — An IoT Platform Deployed Where You Need It
Fundamentum is Amotus’ IoT Platform as a Service (PaaS), designed and operated by Amotus, a Canadian company. Fully customizable, it can be deployed on any server infrastructure worldwide — including Canadian hosting providers or a client’s own private infrastructure, even aboard a ship at sea — so you control where your data is stored and who operates the systems. Clients who prefer hyperscale providers such as AWS or Azure may also choose those options, with full awareness of the jurisdictional implications of the U.S. CLOUD Act.
Fundamentum includes:
- Device Management — configuration, monitoring, and remote updates
- IoT Edge Connect — edge computing and gateway management
- IoT Core — cloud infrastructure and data management
- ML/AI Engine — machine learning and artificial intelligence capabilities
- Insights — analytics and reporting dashboards
- DevSecOps — security-first development and operations practices
Fundamentum manages hundreds of thousands of devices in production, including smart city infrastructure, energy management, and industrial IoT.
Member of the Stratys Defense Consortium
Amotus is a member of the Stratys consortium, alongside GENTEC, SysNergie, and Triode. This consortium brings together Canadian companies specializing in defense engineering and helps meet the Industrial and Technological Benefits (ITB) obligations tied to Canada’s defense contracts.
This membership reinforces Amotus’ positioning as a trusted provider for defense and national security projects.
Data Residency — Your Data in Canada, or Wherever You Require
Your data can be stored in Canada, or in the region you require, and that residency can be written into your agreement. For complete control, Fundamentum can be installed with a Canadian hosting provider or on your own infrastructure, anywhere, so your data stays on systems you control. This flexibility helps you meet the data-residency requirements of government programs and public-sector buyers.
Residency alone does not make data sovereign: under the U.S. CLOUD Act, U.S. authorities can compel a U.S.-based provider to hand over data it controls, wherever the servers sit. Ask every vendor two questions — in which region is the data stored, and which company owns and operates the infrastructure? — and ask us which provider hosts your deployment. Whether you operate under PIPEDA, provincial privacy laws, or Government of Canada security policies, those answers are part of meeting your own obligations.
Frequently Asked Questions
What is the Controlled Goods Program (CGP)?
The CGP is a Government of Canada program, administered by Public Services and Procurement Canada (PSPC), that authorizes registered organizations to examine, possess, and transfer controlled goods related to defense and national security. Amotus and Groupe Vectanor are registered in the program.
Is Fundamentum a sovereign IoT platform?
Fundamentum is designed and operated by Amotus, a Canadian company and a division of Groupe Vectanor. Your data can be stored in Canada, or in the region you require, with residency written into your agreement, and Fundamentum can be installed on your own infrastructure, anywhere, so your data stays on systems you control. For sovereignty, the company that owns and operates the infrastructure matters as much as its location: the hosted service runs in data centres of a third-party cloud provider, which we will specify for your deployment.
What security certifications and audits does Amotus hold?
Amotus and Groupe Vectanor are registered in the Government of Canada’s Controlled Goods Program (CGP). Groupe Vectanor also holds a SOC 2 Type II report issued by RCGT and dated April 15, 2026, covering security, availability, and confidentiality, and Fundamentum is within the scope of that audit.
Can Fundamentum be used for defense IoT projects?
Yes. Fundamentum is developed with DevSecOps practices, can be installed on infrastructure you control, and is within the scope of Groupe Vectanor’s SOC 2 Type II audit; Amotus and Groupe Vectanor are registered in the Controlled Goods Program. Amotus is also a member of the Stratys defense consortium, alongside GENTEC, SysNergie, and Triode.
Where is data hosted with Fundamentum?
Wherever you require. The hosted service runs in data centres of a third-party cloud provider, which we will specify for your deployment, and your data can be kept entirely in Canada, with residency written into your agreement — meeting the data-residency requirements of government programs and public-sector buyers. Fundamentum can also be deployed with a Canadian hosting provider or on your own infrastructure, anywhere. Hyperscale providers (AWS, Azure) remain available as options, but U.S.-based providers are subject to the CLOUD Act regardless of where data is physically hosted.
Let's discuss your project
Have an IoT project with security or data-residency requirements? Our team can assess your needs and propose a tailored architecture.