Plurilock Security Inc. (TSXV: PLUR) (OTCQB: PLCKF) has signed a collaboration agreement with ADGA Group Consultants Inc. to support Canadian organizations pursuing certification under the Canadian Program for Cyber Security Certification (CPCSC), according to a company statement.

Under the agreement, Plurilock will provide CPCSC Level 2 readiness, gap assessment, evidence collection, and assessment reporting services through its Critical Services division. ADGA intends to establish and operate an independent certification body for CPCSC Level 2, subject to accreditation. The two roles are kept operationally separate, with information barriers consistent with ISO/IEC 17024 impartiality requirements. Plurilock will not make certification decisions or represent itself as a certification authority.

CPCSC sets mandatory cybersecurity controls for suppliers to Canada's defence procurement system and is designed for interoperability with allied frameworks, including the U.S. Cybersecurity Maturity Model Certification (CMMC) program. Level 1 requirements began appearing in select Government of Canada defence contracts in summer 2026.

Plurilock launched a CPCSC readiness program in May 2026, building on its experience with CMMC in the United States. The company's Integra Networks subsidiary has served Canadian federal customers since 1985 and holds Canadian federal and NATO contracting vehicles.

"Canada's government and its allies are raising the cybersecurity bar for every company that supplies them, and for the defence industrial base that deadline has arrived," said Ian L. Paterson, CEO of Plurilock.

"Our collaboration with Plurilock lets us put nearly 60 years of trust with Canada's defence and security community to work, building the certification capability our sector will need to secure its supply chain," said LGen Jean-Marc Lanthier (Ret'd), CEO of ADGA.

The agreement is non-exclusive with a two-year term. Financial terms of individual engagements will be established under future statements of work and were not disclosed.