Skip to content
Held in Canada

Findings

What the research turned up

Things a buyer would get wrong without reading the vendor's own pages: pages that contradict each other, a sale that changes who owns the data, a tier that changed. Added as the research finds them, newest first. Each one links the vendor's pages and the listing that carries the full sources.

Follow along with the Atom feed.

  1. Microsoft 365's Canadian storage commitment doesn't cover schools by default

    The Product Terms language for Office 365 Education, as Microsoft's data residency page quotes it, says that for a tenant provisioned outside the EU or EFTA without the Advanced Data Residency for Education add-on, Microsoft "may provision Customer's Office 365 Education tenant in, transfer Customer Data to, and store Customer Data at rest anywhere within the European Union or North America." Business and enterprise tenants provisioned in Canada keep mail, files and Teams chats in Canada at no extra cost.

  2. Microsoft moved in-country Copilot processing for Canada from 2026 to 2027

    Its November 2025 announcement put Canada among the countries getting in-country processing of Microsoft 365 Copilot interactions in 2026, and its December 2025 Canada pledge repeated it. An April 3, 2026 update to the first post says local processing comes to five other countries by the end of 2026, "with support for Canada to follow in 2027". Stored Copilot interactions are already kept in Canada under the Product Terms.

  3. Nexus AI (WELL Health): its own pages disagree on where processing happens

    The scribe page says "All data stays in Canada during storage and processing." The privacy policy (updated November 2025) says transcripts sent to its AI service provider "are kept on servers in the United States for up to thirty (30) days", keeps transcripts indefinitely, and reserves their use for "other business purposes" after de-identification.

  4. AutoScribe (Mutuo Health) changed owners

    HEALWELL AI took control in December 2024, then sold its 58.66% to WELLSTAR on 2025-11-01 (HEALWELL release); WELLSTAR is "a majority-owned subsidiary of WELL Health". Mutuo's privacy policy predates the sale.

  5. OSCAR Pro's "stored in Canada" line doesn't cover clinic records

    Its privacy policy says "All personal information we collect is stored on secure servers in Canada", and also that WELLSTAR "does not collect or use any patient information". The address that policy gives for privacy questions, privacy@wellstar.health, rejected mail on 2026-10-14 and 2026-10-15 ("550 5.4.1 Recipient address rejected").

  6. Microsoft Forms stores Canadian tenants' data in the US by default

    Microsoft's data residency page for its other services says Forms has no specific data residency commitment, and tenants outside the EU, Europe and Australia default to the United States. Exchange Online, by contrast, keeps a Canadian tenant's mailbox content at rest in Canada under Microsoft's Product Terms.

  7. Hushmail: Canadian servers, US parent

    Hushmail's privacy policy (last updated 2019-02-13) puts its servers in Vancouver and Calgary, and says Hush Communications Canada Inc. is a wholly owned subsidiary of Hush Communications Corporation, "a private Delaware, USA company."

  8. QuickBooks Online keeps only a backup in Canada

    Intuit's Canadian security page says Canadian customers' data is hosted in multiple US regions, with a backup of all Canadian customers' data stored in Canada. The page is about six years old.

  9. FreshBooks: Canadian-owned is not the same as stored in Canada

    FreshBooks is run by 2NDSITE Inc. of Toronto. Its privacy policy (updated 2026-10-05) says personal information may be transferred to and stored on servers, partners or vendors in the United States, Switzerland, the UK, the EEA and other countries.

  10. OpenAI: stored in Canada, processed elsewhere

    OpenAI's API data residency article offers data at rest in Canada for eligible customers, but in-region processing only in the US and Europe (and the UAE for some endpoints).

  11. Notarius: an ownership chain that runs through US private equity

    ConsignO Cloud is hosted "on multiple servers located exclusively in Canada". Portage CyberTech, then a majority-owned subsidiary of Converge Technology Solutions (Toronto), acquired Notarius in 2022; in April 2025 an affiliate of H.I.G. Capital, a US private-equity firm, acquired Converge. No page found says whether Portage is still in that chain, so the ownership is marked unconfirmed.