Held in Canada: findings

Microsoft 365's Canadian storage commitment doesn't cover schools by default

2026-10-15T12:00:00Z

The Product Terms language for Office 365 Education, as Microsoft's data residency page quotes it, says that for a tenant provisioned outside the EU or EFTA without the Advanced Data Residency for Education add-on, Microsoft "may provision Customer's Office 365 Education tenant in, transfer Customer Data to, and store Customer Data at rest anywhere within the European Union or North America." Business and enterprise tenants provisioned in Canada keep mail, files and Teams chats in Canada at no extra cost.

Listing: Microsoft 365, Microsoft Exchange Online, Microsoft OneDrive and SharePoint, Microsoft Teams

Microsoft moved in-country Copilot processing for Canada from 2026 to 2027

2026-10-15T12:00:00Z

Its November 2025 announcement put Canada among the countries getting in-country processing of Microsoft 365 Copilot interactions in 2026, and its December 2025 Canada pledge repeated it. An April 3, 2026 update to the first post says local processing comes to five other countries by the end of 2026, "with support for Canada to follow in 2027". Stored Copilot interactions are already kept in Canada under the Product Terms.

Listing: Microsoft 365

Nexus AI (WELL Health): its own pages disagree on where processing happens

2026-10-15T12:00:00Z

The scribe page says "All data stays in Canada during storage and processing." The privacy policy (updated November 2025) says transcripts sent to its AI service provider "are kept on servers in the United States for up to thirty (30) days", keeps transcripts indefinitely, and reserves their use for "other business purposes" after de-identification.

Listing: Nexus AI (WELL Health)

AutoScribe (Mutuo Health) changed owners

2026-10-15T12:00:00Z

HEALWELL AI took control in December 2024, then sold its 58.66% to WELLSTAR on 2025-11-01 (HEALWELL release); WELLSTAR is "a majority-owned subsidiary of WELL Health". Mutuo's privacy policy predates the sale.

Listing: AutoScribe (Mutuo Health)

OSCAR Pro's "stored in Canada" line doesn't cover clinic records

2026-10-15T12:00:00Z

Its privacy policy says "All personal information we collect is stored on secure servers in Canada", and also that WELLSTAR "does not collect or use any patient information". The address that policy gives for privacy questions, privacy@wellstar.health, rejected mail on 2026-10-14 and 2026-10-15 ("550 5.4.1 Recipient address rejected").

Listing: OSCAR Pro

Microsoft Forms stores Canadian tenants' data in the US by default

2026-10-13T12:00:00Z

Microsoft's data residency page for its other services says Forms has no specific data residency commitment, and tenants outside the EU, Europe and Australia default to the United States. Exchange Online, by contrast, keeps a Canadian tenant's mailbox content at rest in Canada under Microsoft's Product Terms.

Listing: Microsoft Forms, Microsoft Exchange Online

Hushmail: Canadian servers, US parent

2026-10-13T12:00:00Z

Hushmail's privacy policy (last updated 2019-02-13) puts its servers in Vancouver and Calgary, and says Hush Communications Canada Inc. is a wholly owned subsidiary of Hush Communications Corporation, "a private Delaware, USA company."

Listing: Hushmail

QuickBooks Online keeps only a backup in Canada

2026-10-13T12:00:00Z

Intuit's Canadian security page says Canadian customers' data is hosted in multiple US regions, with a backup of all Canadian customers' data stored in Canada. The page is about six years old.

Listing: QuickBooks Online

FreshBooks: Canadian-owned is not the same as stored in Canada

2026-10-13T12:00:00Z

FreshBooks is run by 2NDSITE Inc. of Toronto. Its privacy policy (updated 2026-10-05) says personal information may be transferred to and stored on servers, partners or vendors in the United States, Switzerland, the UK, the EEA and other countries.

Listing: FreshBooks

OpenAI: stored in Canada, processed elsewhere

2026-10-13T12:00:00Z

OpenAI's API data residency article offers data at rest in Canada for eligible customers, but in-region processing only in the US and Europe (and the UAE for some endpoints).

Listing: OpenAI API and ChatGPT Enterprise

Notarius: an ownership chain that runs through US private equity

2026-10-13T12:00:00Z

ConsignO Cloud is hosted "on multiple servers located exclusively in Canada". Portage CyberTech, then a majority-owned subsidiary of Converge Technology Solutions (Toronto), acquired Notarius in 2022; in April 2025 an affiliate of H.I.G. Capital, a US private-equity firm, acquired Converge. No page found says whether Portage is still in that chain, so the ownership is marked unconfirmed.

Listing: Notarius ConsignO Cloud