My question remains.
You know the company that hired the subcontractors, but you don't know the subcontractors. However, they are developing an app that includes exceedingly personal information not only about Canadians, but also about people abroad.
How do you ensure that these individuals have the security clearance to do that when you don't know who they are?