Tier 2: Canadian-owned, data in Canada
Canadian-owned, data in Canada
Canadian-owned and data stored in Canada, but the servers belong to AWS, Microsoft or Google, or the vendor does not say whose servers they are.
The company you contract with is Canadian, and the data sits in Canada. A US company still runs the machines in many of these, which a strict review will ask about.