For privacy, IT and procurement staff in Canada
Does your software keep data in Canada? And who can be made to hand it over?
136 products across 20 categories, each rated on where data is stored, where it is processed, and who owns the company that holds it. Every claim links the vendor's own page and the date it was checked.
Or browse by category or see all 136.
Three questions vendors blur together
Storage
Where data at rest lives. “Canadian servers” almost always means this, and only this.
Processing
Where the software runs while it handles the data: functions, AI models, search, support. Often somewhere else.
Ownership
Who owns the company holding it. A US company can be compelled to produce data it controls, wherever it is stored.
The tiers combine them; the rules say which ones your law cares about.
Where most reviews start
- Email
Canadian-owned, data in Canada: 1; Not US-owned, data in Canada: 1; US-owned, Canadian region: 2; Data leaves Canada: 4
- Office suites
Not US-owned, data in Canada: 1; Run it yourself: 2; US-owned, Canadian region: 1; Data leaves Canada: 2
- File storage and sharing
Canadian end to end: 1; Not US-owned, data in Canada: 1; US-owned, Canadian region: 3; Data leaves Canada: 3
- Video calls
Run it yourself: 1; US-owned, Canadian region: 3; Data leaves Canada: 3
- Forms and surveys
Canadian-owned, data in Canada: 1; US-owned, Canadian region: 1; Data leaves Canada: 4; Not yet confirmed: 2
- E-signature
Not US-owned, data in Canada: 1; US-owned, Canadian region: 4; Data leaves Canada: 1; Not yet confirmed: 2
- Clinic and EMR software
Canadian end to end: 1; Canadian-owned, data in Canada: 1; Data leaves Canada: 2; Not yet confirmed: 3
- Transcription and AI scribes
Canadian-owned, data in Canada: 2; Not US-owned, data in Canada: 1; US-owned, Canadian region: 1; Data leaves Canada: 1; Not yet confirmed: 1
What the research turned up
- Microsoft Forms keeps Canadian tenants' responses in the US
Microsoft 365 commits to keeping mail, files and Teams chat in Canada. Forms has no residency commitment and defaults to the United States.
- Canadian servers, US parent
Hushmail stores mail in Vancouver and Calgary. Its privacy policy names its parent as a private Delaware company.
- QuickBooks keeps only a backup in Canada
Intuit hosts Canadian customers' books in US regions, with a backup copy in Canada.
- Canadian-owned is not the same as stored in Canada
FreshBooks is a Toronto company. Its privacy policy says data may be stored in the US and elsewhere.
- Stored in Canada, processed elsewhere
OpenAI can store data at rest in Canada, but runs the models only in the US, Europe or the UAE.
- Ownership chains run through private equity
Notarius is a Québec company with servers only in Canada. Its parent's parent was bought by a US private-equity firm in 2025. The chain is marked unconfirmed until the vendor answers.
No Canadian-owned option found yet
In these categories, no Canadian-owned product that keeps data in Canada could be confirmed. If you make one, tell us.
The tiers
- Tier 1: Canadian end to end
Canadian-owned, data stored in Canada, and no US company running the infrastructure underneath.
- Tier 2: Canadian-owned, data in Canada
Canadian-owned and data stored in Canada, but the servers belong to AWS, Microsoft or Google, or the vendor does not say whose servers they are.
- Tier 3: Not US-owned, data in Canada
Owned outside Canada and the United States, with data stored in Canada.
- Self-hosted: Run it yourself
Software you install on servers you choose. The vendor never holds your data.
- Tier 4: US-owned, Canadian region
Data can be stored in Canada, and the owner is a US company.
- Tier 5: Data leaves Canada
No Canadian storage option, whoever the owner is.
- Unconfirmed: Not yet confirmed
The ownership chain or the data location could not be confirmed from the vendor's own pages.
Research pass dated 2026-10-13. No vendor is called immune to foreign law; the ownership chain is recorded and the reader decides.