Cord3

Cord3 is an Ottawa-based data-centric security company that encrypts files and emails and binds access control directly to the protected data object, rather than relying on perimeter or network-level controls. The approach is designed to keep data encrypted even against privileged administrators, including attackers who have stolen legitimate admin credentials — a threat model that most access-control tools do not address once an attacker is already inside the trust boundary.

The company’s technology traces back to work originally developed for Canada’s Department of National Defence, giving it a defense-grade pedigree that is uncommon among commercial data-protection vendors. Cord3 has since commercialized that technology for enterprise, cloud, and mobile environments, positioning itself in the data-centric security category alongside larger encryption and information-rights-management vendors, but at a much smaller scale.

Cord3 secured $2 million in growth financing from BDC Capital to support expansion, and operates with a small team of roughly a dozen to two dozen people. Public information about named enterprise customers or independent efficacy testing is limited, which is typical for a company of its size and stage, but worth flagging for buyers doing diligence.