Does Microsoft Exchange Online store data in Canada?
Microsoft 365 email (Exchange Online)
Yes.
For Canadian customers, Microsoft Exchange Online stores data in Canada. It is owned by a US company, so the US CLOUD Act can require it to produce data it controls, wherever that data is stored.
Tier 4: US-owned, Canadian regionData can be stored in Canada, and the owner is a US company.
Checked 2026-10-13 against the vendor's own pages.
The facts, claim by claim
- Where data is stored
- Canada, for tenants provisioned in Canada: mailbox content (body, calendar, attachments) stored at rest only in the Canada geography (Microsoft Product Terms)
- Where it is processed
- Not covered by the at-rest commitment; services may process outside Canada
- Support and backups
- Not stated on the pages read
- Owner
- Microsoft Corporation (Redmond, WA) · Parent country: United States
- Servers run by
- Microsoft data centres in Canada · US company
- Customer-held keys
- Not recorded
- Certifications
- CCCS Medium (Microsoft 365 is in Microsoft's assessed scope)
- Worth knowing
- The commitment is in Microsoft's Product Terms, which makes it contractual and not only marketing. Advanced Data Residency add-on extends it.
- Caveats
- An admin can see the tenant's data location under Settings > Org settings > Organization profile > Data location.
What the rules say about this
- US CLOUD Act: The owner is a US company: storing data in Canada does not take it out of reach of US legal process.
- Nova Scotia public bodies: Storage and access must both be in Canada: check support access and backups, not only storage.
- Québec Law 25: Canada is not Québec: storage in Toronto still needs a privacy impact assessment for Québec data.
- OCAP®: Data held by any outside vendor is not in the Nation's possession, whoever owns the vendor.
Summaries only; each rule page links the law or regulator. Not legal advice.
Canadian alternatives to Microsoft Exchange Online
Other email listings that are Canadian-owned, not US-owned, or self-hostable.
| Listing | Tier | Stored in Canada? | Owner | Servers run by |
|---|---|---|---|---|
| Canadian Web Hosting Email | Tier 2: Canadian-owned, data in Canada | Yes | Canadian | Owner not stated |
| Zoho Mail | Tier 3: Not US-owned, data in Canada | Yes | India | Owner not stated |
Compare the alternatives to Microsoft Exchange Online side by side
Sources
All checked 2026-10-13. Claims about storage and ownership rest on the vendor's own pages (or its parent's); supporting links can include regulators and program lists.
- Where the data is stored: https://learn.microsoft.com/en-us/microsoft-365/enterprise/m365-dr-product-terms?view=o365-worldwide
- Who owns it: https://www.microsoft.com/en-us/privacy/privacystatement
- Supporting page: https://learn.microsoft.com/en-us/microsoft-365/enterprise/m365-dr-service-exo?view=o365-worldwide
- Supporting page: https://learn.microsoft.com/en-us/compliance/regulatory/offering-cccs-medium