Engineering capacity behind Canada's government IT primes.
FISTA Solutions delivers as a subcontractor to Canadian primes holding federal supply arrangements and provincial contracts, supplying engineering capacity for application development, cloud, data, AI, and bilingual digital services. Screened access and Protected data stay with the prime's cleared staff and Canadian-hosted environments; FISTA takes the development, test automation, and documentation work packages that do not require them.
- 150+
- projects delivered
- 50+
- companies served
- 99.9%
- verified uptime
- 47%
- efficiency gains
- 12+
- countries reached
Vehicles and portals
Which Canadian vehicles and portals matter, and where does FISTA fit?
Federal IT professional services are bought through supply arrangements managed by Public Services and Procurement Canada and published on CanadaBuys, with Shared Services Canada running federal IT infrastructure. Provinces run their own portals. The primes that hold these arrangements need delivery capacity to perform on task authorizations; FISTA is the subcontractor behind them.
| Vehicle or portal | What it is | FISTA's role |
|---|---|---|
| CanadaBuys (PSPC) | The Government of Canada's procurement portal for tenders and awards | Intelligence on winning primes; sub to those primes |
| ProServices and TBIPS | Supply arrangements for professional services and task-based informatics professional services | Delivery subcontractor to arrangement holders on task authorizations |
| Shared Services Canada | The department that delivers federal IT infrastructure and cloud brokering | Sub to SSC suppliers on application and platform work |
| Ontario Tenders Portal | Ontario's provincial procurement system | Sub to Ontario vendor-of-record and contract holders |
| SEAO (Quebec) | Quebec's electronic tendering system | Sub to Quebec suppliers with French-language delivery held by the prime |
| BC Bid and Alberta Purchasing Connection | British Columbia and Alberta provincial procurement portals | Sub to provincial contract holders |
| MERX | National procurement aggregator across federal, provincial, and municipal buyers | Intelligence and municipal pursuits with local primes |
Work packages
What work packages does FISTA take behind Canadian primes?
Bilingual digital services, cloud on Canadian regions, data platforms, AI agents over departmental knowledge, modernization of legacy systems, and accessibility to WCAG 2.1 AA under the Accessible Canada Act and provincial law. Each is delivered against de-identified data with Protected information staying in the prime's Canadian-hosted environments.
- 01
Bilingual digital services
English and French services built with localization from day one and French content reviewed by the prime, meeting official-languages obligations.
Services - 02
Cloud on Canadian regions
Infrastructure as code, hardened pipelines, and observability on Canadian cloud regions in accounts the prime or department owns.
Cloud - 03
Data platforms and reporting
Pipelines, warehouses, and reporting with lineage and reconciliation evidence for departmental and provincial programs.
Data - 04
AI agents and document intelligence
Claude-based agents and document-processing pipelines with bilingual evaluation sets, permissions, and human review.
AI - 05
Legacy modernization
API layers and incremental migration for aging federal and provincial systems, sequenced around live services.
Modernization - 06
Accessibility to WCAG 2.1 AA
Conformance built in for the Accessible Canada Act and provincial standards such as Ontario's AODA, with test evidence.
Accessibility
Flow-downs
What flows down, and how does FISTA handle it?
Canadian government contracts flow down personnel security screening, Protected data handling and residency, the ITSG-33 security control framework and cloud guidance, privacy statutes, and official-languages requirements. FISTA's workshare keeps screened access and Protected data with the prime and delivers the engineering that does not require them.
| Obligation | What it requires | How FISTA handles it |
|---|---|---|
| Personnel security screening | Reliability Status or higher for personnel with access to Protected information or facilities | Stays with the prime's screened staff; FISTA's workshare excludes screened access |
| Protected B data and residency | Protected information handled in accredited, Canadian-hosted environments | Production data stays in the prime's Canadian environments; de-identified development data |
| ITSG-33 and CCCS cloud guidance | Security control catalogue and cloud security guidance from the Canadian Centre for Cyber Security | Controls mapped in the security practices summary; gaps stated to the prime |
| Privacy Act and PIPEDA | Federal public and private sector privacy statutes, plus provincial law | DPA with the prime; access limited and logged; de-identified data by default |
| Official Languages Act | Services and communications in English and French | Bilingual interfaces built in; French content produced and reviewed with the prime |
| Accessible Canada Act | Accessibility of federal digital services | WCAG 2.1 AA built in with assistive-technology testing and evidence |
General guidance for teaming planning, not legal advice.
Working day
How does the time zone work?
Faisalabad is UTC+5; Eastern Canada is UTC−5 in winter and UTC−4 in summer, a nine-to-ten-hour offset. The shared window is the Canadian morning and the Pakistani evening, used for stand-ups, reviews, and decisions. FISTA delivers overnight against the specification, so the prime's team starts each day with new work to review, and the cadence is agreed per task order.
For Pacific-time primes the shared window is smaller, so FISTA shifts working hours for the engineers on the package and records that in the teaming agreement. The specification names the daily window, the ceremonies inside it, and the handover format, so a delivery lead never waits a full day for an answer that matters.
Teaming call → task authorization
How does a Canadian teaming engagement start?
With a call on the supply arrangement or provincial contract, the department, and the work packages. FISTA sends the due-diligence pack under NDA, the teaming agreement fixes workshare around screening and residency, and the first task authorization runs specification to acceptance with evidence the prime can present.
- 1
Teaming call
Twenty minutes on your pursuits, the work packages you need covered, the flow-downs in play, and whether FISTA's capacity and time zone fit. No deck; a conversation between delivery people.
OutputFit decision and a named pursuit or task-order scope
- 2
Due-diligence pack under NDA
Capabilities statement, rate card by role, key personnel, security practices summary, registration and certification status, references, and FISTA's NDA and teaming templates, or yours.
OutputEverything your contracts and compliance reviewers ask for
- 3
Teaming agreement or subcontract
Scope, workshare, exclusivity per pursuit, rates, flow-down clauses, data handling, IP, key personnel, and exit terms fixed in writing before any task order starts.
OutputSigned agreement with the flow-down set reviewed line by line
- 4
Task-order delivery
Each work package runs specification to verified production: a written spec, a working system, an evidence package, and documentation you can hand to the contracting officer.
OutputAccepted deliverables and a past-performance letter
Regulatory and procurement references on this page are general guidance for planning a teaming engagement, not legal advice. Confirm obligations with your contracts and legal teams for each solicitation.
Clear answers
What primes ask before teaming.
Straightforward guidance for evaluating scope, fit, and the next step.
01Can offshore staff obtain Reliability Status?
FISTA makes no screening claims. Personnel security screening is tied to the prime's contract and to individuals, and work requiring screened access stays with the prime's screened staff under the workshare. FISTA delivers the packages that can be built against de-identified data in environments the prime controls.
02Do you build in French?
Yes. Interfaces and content structures are built bilingual from the start so French is a first-class locale, not a translation pass at the end. French content, terminology, and user-facing text are produced and reviewed with the prime's French-speaking team to meet official-languages obligations.
03Can data stay in Canada?
Yes. Hosting runs on Canadian cloud regions in accounts the prime or department owns, and Protected information stays in the prime's accredited environments. FISTA develops and tests against de-identified or synthetic data, and any access to production data is limited, logged, and covered by the data terms the prime sets.
04Which provinces does FISTA work in?
Any province where the prime holds the contract; Ontario, Quebec, British Columbia, and Alberta are named here because they run the largest provincial IT programs and their own portals. Municipal work follows the same model behind local primes found through MERX and municipal portals.
05How quickly can a task authorization start?
After the teaming agreement is signed and the work package is specified. Timing depends on scope, environment access, and the seniority required, and is stated per task authorization rather than promised generically, with the first evidence gate visible in the first week.
Six markets
Every market FISTA subcontracts in
- 01SLED and federal civilianUnited StatesOpen the market brief
- 02G-Cloud, CCS, NHS, TEDUK and EuropeOpen the market brief
- 03Digital Agency-era programsJapanOpen the market brief
- 04UAE, KSA, Qatar, Kuwait, Bahrain, OmanMENAOpen the market brief
- 05Federal supply arrangements, provincesCanadaOpen the market brief
- 06BuyICT, DTA, statesAustraliaOpen the market brief
Continue exploring
Related capabilities
Sub-first, on the record
Name the supply arrangement and the department. We will propose the workshare.
Tell us which arrangement or provincial contract you hold, the department, and the work packages. FISTA sends the pack and a workshare that keeps screened access and Protected data with you.