Skip to content
The British Columbia Parliament Buildings in Victoria, lit at blue hour.
00Public sector · Pre-qualified in BC

Custom software
your public body owns outright.

For municipal, provincial, and federal teams deciding between another subscription and a system of their own. We are pre-qualified with the Office of the Auditor General of BC and on the Province of BC Multi-Use List. Fixed price, milestone billed, built to WCAG 2.1 AA, hosted in Canada. On final payment you own 100% of the source, the data, and the IP.

RFP, RFQ, or ITQ in hand? eric@usebluestone.com

// Verifiable procurement records

OAG-RFQ-26-068
Auditor General of BC, Digital Services
ON-003317-03
Province of BC Multi-Use List, Service Area 3
BC Digital Marketplace
Registered supplier

Pre-qualification is permission to be invited, not a contract award. $5M commercial general liability and $2M cyber liability are bound and in force today.

BC Parliament Buildings, Victoria
100%
Source and IP yours
WCAG 2.1 AA
Build standard
$5M
General liability bound
Fixed
Price, milestone billed
01Standing with BC public bodies

Where we already sit on the government side

Three public procurement records, each with a reference number you can check without asking us for anything.

  • OAG-RFQ-26-068

    Runs to 2030-07-07

    Pre-qualified supplier to the Office of the Auditor General of British Columbia

    Digital Services. Qualified in three categories: Public Cloud Services, Application and System Design, and AI Readiness and Adoption.

  • ON-003317-03

    Pre-qualified, Province of British Columbia Multi-Use List, Service Area 3

    Software Development and Testing. The provincial standing list ministries draw from when they scope a build.

  • BC Digital Marketplace

    Registered supplier

    Listed on the province’s marketplace for digital opportunities, so BC public bodies can find and invite us directly.

Delivery in progress

We hold an active contract with a Canadian provincial government ministry, client name withheld under contract confidentiality.

To be exact about what the first three are: a pre-qualification is permission to be invited, not a contract award and not a guarantee of work. It means the province has already reviewed us against its criteria and cleared us to bid, so a ministry can go straight to a statement of work instead of running a full open competition.

For most public bodies the first step is not a build at all. It is a fixed-price application condition assessment of one system: how much working life is left in it, and what it would take to add more. It is read-only, nothing about how the system runs changes while it happens, and it ends in a written report you can forward upward without editing it.

02Renting versus owning

A subscription is a budget line that never ends.

Your organization does not rent its vehicles fleet-wide, its buildings, or its road salt, because ownership is cheaper across the life of the asset. Software was the exception for one reason: a custom build used to cost roughly ten times what it costs now. That stopped being true.

A generalized product that fits no department in particular is now both worse and more expensive than a system commissioned to match the actual process. The gap shows up in year four and never closes.

10 years of renting
$151,000

A $12,000 per year subscription at 5% annual escalation. $120,000 if it never goes up, which it does.

10 years of owning
$30,000

A one-time $30,000 build. Hosting is paid to your provider, not to us.

Break-even
Year 2.5

Everything after that point is budget you keep.

Ahead by year 10
$121,000

$90,000 ahead if the subscription never escalates, which it does. The system is also an asset on your side of the table.

Figures are a worked example, not a quote. Enterprise scope runs from From $10,000, scaling with what the system has to do.

03What ownership means on paper

No licence. No renewal. No leverage over you.

On final payment your public body owns 100% of the source code, the data, and the intellectual property. There is no per-seat licence to true up, no annual renewal to negotiate under pressure, and no vendor that can be acquired, sunset, or repriced out from under a program residents depend on.

If you want to move the system to an internal team or to another developer, you can, and we will help with the transfer rather than slow it down. That is the whole point of the arrangement.

Support after handover is not a mandatory retainer. Take the code and owe nothing, or keep an hourly relationship triaged by severity: a critical fault is handled immediately, a cosmetic one waits for the next available week.

04Accessibility and language

Built for every resident who has to use it.

WCAG 2.1 AA is our build standard. Semantic structure, keyboard operation, colour contrast, visible focus states, and screen-reader support are in the work from the first screen, not retrofitted before launch. To be precise about the wording: it is a standard we build to, not a certification we hold, and we are glad to have the delivered product audited by a third party at your direction.

English and French parity is a capability we scope in, not a translation bolted on at the end. Because the decision is architectural, every screen, label, notification, and generated document can run in both official languages.

We hold this site to the same bar. Read the accessibility statement.

05Residency

Incorporated here. Hosted here when the policy says so.

BlueStone AI Inc. is a Canadian federal corporation, registered extraprovincially in British Columbia, and based in Metro Vancouver (Port Coquitlam). The work is done here, in your time zone, and reachable during your business hours.

For programs carrying data-residency obligations we deploy entirely inside Canadian regions so operational and citizen data stays in the country. Residency and hosting are written into the engagement rather than assumed.

06The vendor file

Insurance and registrations

Everything below is a registry number or a bound policy. Look any of it up, or ask and we will send the certificate.

Commercial general liability
$5,000,000

Bound and in force.

Professional liability (E&O)
$2,000,000

Bound and in force.

Cyber liability
$2,000,000

Bound and in force.

WorkSafeBC account
201966367

Active. Clearance letter on request.

Federal corporation (CBCA)
1730441-2

BlueStone AI Inc., incorporated 2025-09-09.

BC extraprovincial registration
A0142791

Registered to carry on business in British Columbia.

Business number
771523834 RC0001

Canada Revenue Agency.

Ownership
Canadian

Canadian-owned small business.

Certificates of insurance and a WorkSafeBC clearance letter are issued on request, usually the same day. BlueStone AI Inc. is a small supplier under the Canada Revenue Agency threshold and is not currently registered for GST/HST, so invoices carry no GST line.

07Security posture

What we run, and what we do not claim.

The controls below are how every build operates today. The block underneath is the list of things we are not, which is the part most vendors leave for you to discover during clarifications.

Encryption in transit and at rest

Standard on every build, not a paid tier.

Role-based access control

Least privilege by role, so staff see only what the job requires.

Audit logging

Who did what, and when. An activity trail an external reviewer can walk through.

Written security policy

A documented, reviewable policy applied to every engagement rather than improvised per project.

What we do not hold

  • We are not SOC 2, ISO 27001, FedRAMP, StateRAMP, or HECVAT certified, and we will not imply otherwise on a bid.
  • CyberSecure Canada certification is in progress.
  • WCAG 2.1 AA is the standard we build to, not a certificate we hold.
  • We are Canadian-owned and a small business. We are not Indigenous-owned, women-owned, or veteran-owned.
  • BlueStone AI Inc. is a small supplier under the Canada Revenue Agency threshold and is not registered for GST/HST, so invoices carry no GST line.

If your requirement is hard-gated on one of those certifications, we are not your supplier, and you will hear that in the first reply instead of at clarification stage.

08How an engagement runs

See it before you award it.

Five steps, each one something a committee can point at in a record of decision.

  1. 01

    Requirement review

    We map the requirement against how the program actually runs today: the current systems, the gap a commercial product would leave, and the outcome the evaluation committee has to be able to defend.

  2. 02

    Working prototype before award

    Where the process allows it, we build a clickable prototype of the solution during evaluation. Evaluators and end users click the real thing instead of reading a promise in a slide deck.

  3. 03

    Fixed price, milestone billed

    One agreed scope, one agreed number, invoiced at milestones. Every milestone is a working deliverable you can open, not a status report.

  4. 04

    Documentation and knowledge transfer

    We write the runbook and train your staff, so the operating knowledge lives inside your organization rather than inside our heads.

  5. 05

    Handover

    Source code, data, and infrastructure transferred on final payment. Ongoing support is optional and never a condition of the system continuing to run.

09Relevant work

Systems of the shape public buyers recognize.

Described without client names. Written permission is not on file for the work we have delivered, and we would rather be vague about who than loose with confidentiality.

01
WIN_RATE

Public procurement

Bid discovery and win-rate system

Built and run in-house: ingests public RFPs, scores them against capability, drafts response sections from a library, and tracks win rate over time. An example of the registry and scoring systems we build. Not a delivered client engagement.

02

Compliance and audit

Compliance and audit system

Policy library, attestations, evidence collection, and an append-only activity log, so twelve months of activity can be walked through on one screen during an external review.

03

Education and training

Bilingual-ready learning platform

A custom learning platform for a private education provider: course delivery, lessons, assessments, and credential issuance, structured to run in full English and French parity.

Reserved

Named case study

A named build with outcomes lands here the day written client permission is confirmed. References are available privately during an evaluation.

10Procurement questions

What an evaluator asks first.

Answered the way we would answer them in writing, because you can check every one of them.

Are you pre-qualified to sell to BC public bodies?

Yes, on two provincial records. BlueStone AI Inc. is a pre-qualified supplier to the Office of the Auditor General of British Columbia under RFQ OAG-RFQ-26-068 (Digital Services) in three categories: Public Cloud Services, Application and System Design, and AI Readiness and Adoption, running to 2030-07-07. We are also pre-qualified on the Province of BC Multi-Use List, Service Area 3, Software Development and Testing (ON-003317-03), and registered on the BC Digital Marketplace. To be exact: a pre-qualification is permission to be invited, not a contract award.

Have you delivered for government before?

We hold an active contract with a Canadian provincial government ministry, client name withheld under contract confidentiality. We can speak to scope and approach in a procurement conversation, but we will not name the client on a website, which is the same discretion your file would get.

Who owns the source code, the data, and the IP?

Your public body does. On final payment you own 100% of the source code, the data, and the intellectual property. No per-seat licence, no renewal, no clause that lets us reprice you later. You can host it yourself or hand it to another developer at any time.

Do you hold SOC 2, ISO 27001, FedRAMP, or HECVAT?

No. We do not hold SOC 2, ISO 27001, FedRAMP, StateRAMP, or HECVAT, and we will not imply otherwise on a bid. CyberSecure Canada certification is in progress. WCAG 2.1 AA is the standard we build to, not a certificate we hold. If your requirement is hard-gated on one of those certifications, we are not your supplier and we will say so on the first call.

Is the software accessible?

We build to WCAG 2.1 AA from the first screen: semantic structure, keyboard operation, colour contrast, visible focus states, and screen-reader support. Accessibility is a build standard we apply, not a certification we hold, and we are happy to have the delivered product audited by a third party at your direction.

Can you deliver in English and French?

Yes, as a capability. Bilingual delivery is an architectural decision made at the start rather than a translation layer added at the end, so we can deliver full English and French parity across screens, labels, notifications, and generated documents. Scope it in the statement of work and it ships that way.

Is the data hosted in Canada?

It can be. BlueStone AI Inc. is federally incorporated in Canada, registered extraprovincially in British Columbia, and based in Metro Vancouver (Port Coquitlam). For programs with data-residency obligations we deploy entirely inside Canadian regions so operational and citizen data stays in the country. Hosting and residency are confirmed in writing per engagement.

What insurance and registrations do you carry?

Commercial general liability of $5,000,000, professional liability (errors and omissions) of $2,000,000, and cyber liability of $2,000,000, all bound and in force. WorkSafeBC account 201966367 is active. Federal corporation 1730441-2 (CBCA), BC extraprovincial registration A0142791, business number 771523834 RC0001. Certificates of insurance and a WorkSafeBC clearance letter are issued on request, usually the same day.

How does pricing and billing work?

Public-sector work is fixed-price and milestone-billed against a scope agreed up front, so the budget line is known before the first commit. Support after handover is not a mandatory monthly retainer. You can take the code and owe nothing, or keep an hourly relationship triaged by severity, where a critical issue is handled immediately and a cosmetic one waits for the next available week.

How do you handle an award larger than your current capacity?

We bid as prime and staff up on award, with the named delivery lead on the file from day one. We stay lean by design between engagements so that overhead does not end up in your invoice. If a scope is genuinely beyond what we should take on, we say that during evaluation rather than after signature.

We build it, we document it, and we train your people on it. The day we walk away, nothing breaks and nobody is locked out. You paid for it. You own it.
Our commitment to every public-sector buyer
Written reply · No obligation

Evaluating a build for your department?

Send the requirement in writing. You will get a straight answer on whether a custom build fits, what a prototype during evaluation would look like, and where we are the wrong supplier — in a form you can forward to the rest of the evaluation team.

Certificates of insurance, a WorkSafeBC clearance letter, and our pre-qualification references are available on request, usually the same day.