Restricted Networks & Defence
Runs inside your network. Owned in Canada.
Supplying a defence program, or bidding under Buy Canadian or CPCSC? When a contract asks what software runs on your systems, answer from a signed record. Book a Sovereign readiness call.
Canadian hardware still runs software someone has to account for.
Package-Master gives you control over which Debian and Ubuntu packages reach your systems, and a signed record of every set you published.
Your package data stays in your network. Nothing needs to reach us.
Package-Master runs inside your network. We never receive your package data, so there is no vendor-side copy of it for any court, in any country, to compel. Licensing works offline and there is no phone-home. Your deployment still syncs with the upstream sources you approve.
The vendor is Canadian-owned: a product of 1001379963 Ontario Inc. That can matter for procurement under Canada's Buy Canadian policy and CPCSC rules. A Canadian-controlled deployment can reduce some jurisdictional risks. It does not remove every legal or supply-chain risk.
| Date | Event |
|---|---|
| December 16, 2025 | Canada's Policy on Prioritizing Canadian Suppliers took effect for qualifying strategic procurements valued at $25 million or more. |
| June 15, 2026 | The threshold decreases to $5 million or more, pulling in more contracts. |
CPCSC sets cybersecurity requirements for defence suppliers that handle specified federal information. Whether it applies, and what it requires, depends on the procurement, the information classification, and other Government of Canada rules. The same goes for the Buy Canadian policy.
Data-location and control requirements can also depend on the information classification, procurement terms, controlled-goods obligations and other Government of Canada rules. Package-Master does not certify your organization or guarantee that you meet any standard. It does not produce evidence packs or audit reports.
Offline licensing & deployment boundaries
Offline licensing
Licence activation and renewal work without an internet-connected control server. No phone-home, no outbound telemetry, no dependency on reaching us to keep running.
Physical transfer: in development
Today, your deployment syncs approved upstream sources through controlled outbound access. A physical transfer workflow for fully disconnected networks is in development and is not included as a ready-to-use deployment kit.
Sovereign
$30,000/yr for the first restricted-network environment
$24,000/yr for each additional environment (20% off)
Up to 500 machines per environment
- Offline licensing
- Controlled upstream sync
- Priority support
Booked call → annual invoice. Not available in self-serve checkout.
Evidence Readiness Pilot
$12,000 one-time
30–45 days, one bounded fleet
50% credited to Sovereign year one
- One bounded fleet, in your environment
- Half the cost credited toward Sovereign year one
Booked call → invoice.
Book a Sovereign readiness call
For scoping a Sovereign deployment or an Evidence Readiness Pilot. Pick a time; the calendar books directly. Every other plan is self-serve.
Book a callPrefer email? Write to [email protected].