--- title: "Noordev | Bilingual Odoo, ISO 27001 & Web Agency, Montréal" description: "Bilingual Montréal agency for Odoo ERP, ISO 27001 and Law 25 compliance, websites and SEO. Scope and price in writing before we start." url: "https://www.noordev.com/" lang: "en-CA" --- **Bilingual** EN · FR Odoo Ready Partner ISO 27001 · Loi 25 Montréal · Toronto · Miami · Rabat # Software, security and growth — _without the surprises._ Odoo ERP, ISO 27001 & Loi 25 compliance, websites and marketing that report in pipeline. One senior, bilingual team. Scope and price in writing before anyone starts. [Get a scoped estimate →](https://www.noordev.com/#h2-quote) [See our work](https://www.noordev.com/case-studies/) Answered by a senior consultant within one business day “Every project we take on gets a written scope, a written price and a senior name attached to it. If the number changes, you’ll know why before it does.”Mohamed · Founder, Noordev · est. 2012 14yrs Shipping digital work 230+ Engagements delivered 4 Offices · 3 continents 98% Clients who renew **Odoo Ready Partner** Published**Odoo App Store** Practice**ISO 27001:2022** Compliance**Loi 25 · PIPEDA · CASL** Reply**< 1 business day** Languages**EN · FR · AR** Since**2012 · Montréal** Data**Stays in Canada** **Odoo Ready Partner** Published**Odoo App Store** Practice**ISO 27001:2022** Compliance**Loi 25 · PIPEDA · CASL** Reply**< 1 business day** Languages**EN · FR · AR** Since**2012 · Montréal** Data**Stays in Canada** What we do ## Eleven ways to stop _firefighting_ your systems. Four practices, one senior team. The lift clients notice most comes from doing them together: the ERP that already satisfies the auditor, the website that already feeds the CRM. ### Build & operate 05 services [Odoo Ready #### Odoo ERP Discovery to cutover: scoping, configuration, catch-weight and multi-company edge cases, bilingual training, hypercare. View the service _→_](https://www.noordev.com/odoo/) [Design + build #### Web & apps Marketing sites, customer portals, internal tools. WordPress, React or Odoo-native, with lead tracking wired in from day one. View the service _→_](https://www.noordev.com/services/) [Retainer #### SEO & paid media Technical SEO, bilingual content clusters, Google and Meta acquisition. Reported in pipeline, not sessions. View the service _→_](https://www.noordev.com/search-engine-optimization-agency/) [Assessment first #### AI & automation Document AI, workflow automation, governed agents inside Odoo. Human-in-the-loop, audit-trailed, measured in hours reclaimed. View the service _→_](https://www.noordev.com/ai-and-automation/) [From $850 / mo #### Web maintenance Patching, monitoring, tested backups, performance budgets and change hours, under a written SLA. View the service _→_](https://www.noordev.com/website-maintenance/) ### Security & risk 03 services [Growing fast #### Cybersecurity & GRC Risk program, policy library, control implementation, vendor reviews, tabletop exercises. Loi 25 and PIPEDA built in. View the service _→_](https://www.noordev.com/cybersecurity-grc/) [11-month path #### ISO 27001:2022 Gap assessment to Stage 2: ISMS scope, Statement of Applicability, 93 Annex A controls, internal audit, management review. View the service _→_](https://www.noordev.com/iso-27001-implementation/) [4 days / month #### Fractional CISO Security leadership on retainer: board reporting, program ownership, incident response, SOC 2 readiness. View the service _→_](https://www.noordev.com/cybersecurity-grc/#cta) ### Brand, marketing & people 03 services [6–10 week sprints #### Brand identity Positioning, naming, visual system, verbal voice and guidelines, built to work in both languages. View the service _→_](https://www.noordev.com/services/) [Retainer + sprints #### Digital marketing Full-funnel content, social, CRM and attribution for bilingual markets. CASL-compliant by default. View the service _→_](https://www.noordev.com/services/) [EN · FR · AR #### Corporate training Odoo administrator, ISO 27001 internal auditor, security awareness, AI for teams. Eligible for the Québec 1% training law. View the service _→_](https://www.noordev.com/training/) Published · Odoo App Store ## We didn’t just implement Odoo. We _shipped a module for it._ Noordev’s MCP connector lets AI assistants read and act on Odoo data through a governed, permissioned layer. It’s listed on the official Odoo App Store, which means every line of it passed Odoo’s review, and it’s the reason companies find us before they’ve heard of us. - **Governed access.** Every action is scoped to Odoo permissions and logged. - **Works with Claude and others.** Any MCP-capable assistant. - **Audit-friendly.** Built by an ISO 27001 practice, not a hobby fork. - **Supported.** Same senior team that installs it answers the tickets. **Odoo 17 · 18**MCP standardLoi 25 aware [See the Odoo practice →](https://www.noordev.com/odoo/) ![Isometric illustration of a module plugging into a platform with connections to three app windows](https://www.noordev.com/assets/home/hf-20260904-123220-0160f963-0888-4305-99da-1d2fdd072997.webp) Odoo App Store · Listed **US$99**Per instance · one-time How it works ## From “we should look at this” to _done_. No twelve-week reveals. You see wireframes, prototypes and controls as they’re built, and you sign off at every gate. 01 Week 1 #### Tell us what’s broken Sixty seconds in the form, then a discovery call with a senior consultant. We audit what exists and agree on what “done” looks like. 02 Week 2–3 #### Get scope and price in writing A written proposal: scope, timeline, price, and the people required on both sides. Nothing starts without sign-off. 03 Week 4 → #### Senior team, weekly checkpoints One point of contact, one level from a decision-maker. We ship against the metrics we agreed to in week one, then keep measuring. The promise ## The scope is the scope. _In writing._ Everything that usually goes wrong with an agency or an ERP integrator, we put in the contract before you sign it. - ✓ #### No surprise invoices. Fixed scope and price before work starts. If something changes, you get a written change request first, never a bigger bill after. - ✓ #### No junior hand-off. The consultant who scopes your project is the one who runs it. Your team is always one level away from a decision-maker. - ✓ #### No “English only” anything. Documentation, training and support delivered in French and English by default. Arabic on request. - ✓ #### No data leaving Canada. Loi 25 and PIPEDA compliant handling. Your data stays on Canadian infrastructure unless you decide otherwise. ![Illustration of a security operations desk at night with three monitors showing network graphs](https://www.noordev.com/assets/home/hf-20260904-123220-6ce3c025-c6fc-497a-8b5f-273595955554.webp) **Scoped.**Priced. Signed. Track record ## Fourteen years. Two hundred and thirty engagements. _One team._ Most of our clients have been with us for years, because the second project is easier than the first when the same people are still in the room. 14yrs In business Founded Montréal · 2012 230+ Engagements delivered Web, Odoo, security, training 98% Clients who renew Retainers and second projects 4 Offices · 3 continents Montréal · Toronto · Miami · Rabat Case study · Meridian Bank · 2025 “Attention to detail and creativity truly set them apart. Our site now converts at three times the rate of the old one — and the board notices.” JL **Jane Lafleur**Head of Marketing, Meridian Bank [Read the full case study →](https://www.noordev.com/case-studies/) 3.2× Conversion rate ↑ vs. legacy site 0.9s Largest Contentful Paint ↓ from 3.4s · p75 mobile +187% Organic sessions ↑ 12-month window 11mo ISO 27001 certified 0 major nonconformities On the job ## Where the work _actually happens._ Warehouse floors, security desks, training rooms. The pretty part of the job is the website; the useful part is everything behind it. ![Illustration of a warehouse floor with pallet racking and a forklift](https://www.noordev.com/assets/home/hf-20260904-123220-c96c881a-12a1-4941-bba2-44428ef3bde9.webp) **Catch-weight, FEFO, lot traceability**Odoo · Food distribution ![Illustration of a security operations desk with three monitors](https://www.noordev.com/assets/home/hf-20260904-123220-6ce3c025-c6fc-497a-8b5f-273595955554.webp) **93 Annex A controls, one evidence binder**ISO 27001 · Financial services ![Illustration of a training room with a projector and laptops](https://www.noordev.com/assets/home/hf-20260904-123220-af380bc0-3f6f-4d13-a4c7-f8bd1acc3b17.webp) **Bilingual cohorts, on-site or remote**Training · Odoo & security awareness ![Illustration of a founder seen from behind, looking over the Montréal skyline](https://www.noordev.com/assets/home/hf-20260904-123220-d47d44af-8379-44af-8791-d6297e5934eb.webp)The founder From Montréal to three continents ## Built by someone who has been _the client_. “I started Noordev in 2012 because every agency I hired shipped the website and disappeared, and every ERP integrator scoped in a language my team didn’t speak. We do the opposite: one senior contact, both languages, the scope in writing.” Mohamed founded Noordev in Montréal and grew it into four offices across Canada, the United States and North Africa, without ever handing the scoping desk to a sales team. He still reviews every proposal. Montréal · HQTorontoMiamiRabat [Read our story →](https://www.noordev.com/about/) Where we work ## Four cities. _One standard._ Québec regulation, Canadian tax, US expansion, North-African delivery capacity. Same scoping desk, same senior team, whichever office picks up. HQ Québec · EST #### Montréal Laval–Montréal. Loi 25, GST/QST, bilingual delivery. Where every proposal is written. [(450) 990-0134](tel:+14509900134) FREN Ontario · EST #### Toronto English Canada: PIPEDA, ISO 27001 and SOC 2 readiness for scaling SMBs. [(450) 990-0134](tel:+14509900134) ENFR Florida · EST #### Miami US clients and Canadian companies expanding south. Odoo, web and growth. [(877) 477-4146](tel:+18774774146) ENES on request Morocco · GMT+1 #### Rabat Delivery and training centre. Extended hours coverage for North-American clients. [0661 86 39 92](tel:+212661863992) FRAREN Questions ## Everything people ask _before they book._ Didn’t find yours? Ask it in the form below; a senior consultant answers within one business day. Q/01How much does an engagement cost?+ It depends on the practice, and we won’t hide that behind “contact us.” Work is priced in CAD with a **40-hour minimum engagement**; GST/QST apply. Odoo implementations and ISO 27001 programs are quoted as fixed-scope projects after a short paid discovery; web maintenance starts at **$850 / month**; fractional CISO runs on a monthly retainer. You get the exact number in writing before anything starts. Q/02Why a paid discovery before a fixed price?+ Because a fixed price on an unscoped ERP or security project is a guess, and guesses turn into change orders. Discovery is short, priced, and credited against the project if you proceed. It’s how we keep the promise that the scope is the scope. Q/03Do you work in French?+ By default. Proposals, documentation, training and support are delivered in French and English; Arabic is available on request. Our Québec clients get a team that understands Loi 25 and the Office québécois de la langue française’s expectations, not a translation layer. Q/04Are you an Odoo partner?+ Yes: Noordev is an **Odoo Ready Partner**, and we publish our own module on the official Odoo App Store. We implement, migrate, customize, host and support Odoo, including catch-weight, multi-company and Canadian tax configurations. Q/05How long does ISO 27001 take?+ A typical SMB path is **about eleven months** from gap assessment to Stage 2 audit. We scope the ISMS, write the Statement of Applicability, implement the Annex A controls, run the internal audit and management review, and prepare you for the certification body. The audit itself is performed by an accredited third party. Q/06Can you help with SOC 2 or HIPAA?+ SOC 2, yes: we act as readiness and implementation partner, and a CPA firm performs the attestation. HIPAA is a US law; Québec clinics and health organisations are governed by Loi 25, PIPEDA and their professional orders, and that’s what we build to. Q/07Where is my data stored?+ On Canadian infrastructure by default, with Loi 25 and PIPEDA-compliant handling. If a project requires otherwise, it’s documented and approved by you first. Q/08How fast can you start?+ We reply within one business day and can usually hold a discovery call within the week. Web and marketing work often starts within two to three weeks; Odoo and ISO programs are scheduled after discovery, currently a few weeks out. Get started ## Your scope is one business day away. Four fields, one written scope, zero obligation, from a senior team that puts the price in the contract, not in the follow-up. Or call Montréal-Toronto **(450) 990-0134** · Miami **(877) 477-4146**