Lawyer Review Checklist

Version 0.1.0 (draft) · text fingerprint 16f2e1835b0c

DRAFT: not legal advice, requires review by a Canadian lawyer before use with real customers.

This is a checklist for a Canadian lawyer. It is not a contract. Nobody accepts it.

A. The product and the decisions made

Mauzy Marine is a decision-support app and shore dashboard for fishing fleets.
It sits beside the official Environment and Climate Change Canada forecast. The skipper makes every call.
It uses phone position, motion and pressure, one-tap reports and, in phase 2, a sensor kit.
Each harvester owns their data and picks a sharing mode. A group is one tenant.
It runs on Railway in the United States (us-west2). Billing is by invoice.

#	Decision made on 8 November 2026
D1	The provider is Kipnetic and Sheerr Weather, jointly.
D2	A Clerk Organization is a tenant, mirrored into our database.
D3	Skippers sign in with an emailed or texted code, by invitation. No passwords.
D4	Data lives in the US for now, is disclosed, and is on this list.
D5	Two database logins, so row-level security cannot be bypassed by the app.
D6	Mobile sign-in uses a device token, not cookies in the web view.

B. The twelve review items

☐ 1. Contracting party and PIPEDA "organization". Legal names, joint or several liability, privacy officer, the written agreement between the two companies, trade name "Mauzy Marine". Touches: all documents, especially the Pilot and Subscription Agreement, Data Ownership and Sharing Agreement, Data Processing Addendum.
☐ 2. Limitation of liability for a safety-adjacent product, and whether a cap holds for a death or injury claim in NL. Touches: Terms, Pilot and Subscription Agreement, Hardware Addendum.
☐ 3. Enforceability of the disclaimer when a skipper relies on a forecast. Touches: Safety Disclaimer, Terms.
☐ 4. Indemnity in both directions. Touches: Pilot and Subscription Agreement, Hardware Addendum, Terms.
☐ 5. Insurance. What we carry, what boat owners must carry, and timing before any install. Touches: Pilot and Subscription Agreement, Hardware Addendum.
☐ 6. Governing law and venue. NL law and courts, and what to do for Labrador-based parties. Touches: all contracts.
☐ 7. E-signature validity for group agreements, and whether click-acceptance is enough for personal ones. Touches: Pilot and Subscription Agreement, Hardware Addendum, Data Processing Addendum, Terms, Privacy, Consent.
☐ 8. Privacy. Is the location consent meaningful under PIPEDA, can a co-op consent for members, US hosting and cross-border wording, the retention table, any Atlantic rule, and Quebec Law 25 stated as not targeted. Touches: Privacy, Location and Sensor Consent, Retention, Data Ownership.
☐ 9. Co-op governance. Do the bylaws or union status change who may sign for members. Touches: Data Ownership and Sharing Agreement, Pilot and Subscription Agreement.
☐ 10. Hardware addendum. Installation liability, who owns the kit, removal, Starlink plan terms, vessel certification. Touches: Hardware Addendum.
☐ 11. Sub-processor terms. That Clerk, Railway, OpenRouter and the weather providers allow this use. Touches: Sub-processor List, Data Processing Addendum, Privacy.
☐ 12. Breach procedure wording and the "real risk of significant harm" test. Touches: Breach Response Procedure, Privacy.

C. Placeholders to fill

Type	Examples	Where
Company legal names, addresses	[KIPNETIC LEGAL NAME], [SHEERR WEATHER LEGAL NAME], [GROUP LEGAL NAME], [ADDRESS]	All contracts
Privacy officer	[PRIVACY OFFICER NAME], [PRIVACY CONTACT EMAIL]	Privacy, Breach Response
Fees and payment	[FEE], [INVOICE SCHEDULE], [PAYMENT DAYS], [INTEREST RATE], [KIT PRICE]	Pilot and Subscription Agreement, Hardware Addendum
Dates	[START DATE], [END DATE], [INSTALL DATE]	Pilot and Subscription Agreement, Hardware Addendum
Insurance	[TYPES AND AMOUNTS OF INSURANCE]	Both contracts
Liability and indemnity	[LIABILITY CAP], [INDEMNITY TERMS]	Both contracts
Notice and cure periods	[NOTICE PERIOD], [CURE PERIOD], [REPORT DAYS], [RESPONSE TIME]	Both contracts
Retention periods	12 months pings, 24 months readings and reports, 7 years consent and audit	Retention, Privacy
Named people	Fleet admin, shore manager, provider contact, signers	Schedule B, signature blocks
Choices	[DECISION: kit ownership], [LAWYER: ...] notes	Hardware Addendum, all

D. All 14 documents

Id	Who accepts	When	Top question for the lawyer
terms	Every user	Sign-in	Is click-acceptance enough, and is the liability cap valid?
privacy	Every user	Sign-in	Is US hosting disclosure and consent wording enough under PIPEDA?
acceptable-use	Every user	Sign-in	Can we suspend a user for misuse without notice?
safety-disclaimer	Every user	Sign-in, shown in the app	Will it hold if a skipper relies on a forecast?
location-sensor-consent	Every user, per feature	Before GPS, motion or pressure is on	Is this meaningful consent, and is withdrawal handled right?
data-ownership-sharing	The harvester, and the group for its members	Before any data is shared	Can the co-op bind members, and does it fit the bylaws?
pilot-subscription-agreement	The group	Before onboarding	Who is liable between the two provider companies?
hardware-installation-addendum	The group and each boat owner	Phase 2, before install	Who bears installation and loss risk, and who owns the kit?
data-processing-addendum	The group	With the pilot agreement	Who is controller and who is processor?
cookie-notice	Visitors	Site and app	Is essential-only storage correctly described?
subprocessors	Published	Always	Is the notice period for changes enough?
retention-deletion	Published, part of the privacy policy	Always	Are 12 and 24 months right for a seasonal fishery?
breach-response	Internal, summary in the privacy policy	Always	Is the risk test and record keeping correct?
lawyer-review	Nobody	Not applicable	Is anything missing from this list?

E. Sign-off

Field	Entry
Reviewer name
Firm
Date
Scope of review
Documents approved
Documents needing changes
Signature