At the task authorization stage, it is the client department—in these cases, it's the CBSA—and those are signed by a single individual, who accepts the evaluation grid that was submitted by the vendor.
On January 31st, 2024. See this statement in context.