Does Microsoft 365 Copilot store data in Canada?

The facts, claim by claim

Where data is stored

Canada, for tenants provisioned in Canada: "any stored content of interactions with Microsoft 365 Copilot or Microsoft 365 Copilot Chat" is kept at rest only in the Canada geography (Product Terms; Copilot since March 1, 2024, Copilot Chat since September 1, 2025). Copilot Cowork's prompts and responses have the same commitment for Canada

Where it is processed

Not in Canada yet: "Customers outside the EU may have their queries processed in the US, EU, or other regions." Microsoft expects in-country processing for Canada in 2027 (its update of April 3, 2026)

Support and backups

Web searches are sent to the Bing Search service. Anthropic's models, on by default outside the EU, EFTA and the UK, are "excluded from the EU Data Boundary, and when applicable, in-country processing commitments". Anthropic models with Data Retention (off by default) are kept by Anthropic, outside Microsoft's Product Terms: most inputs and outputs for up to 30 days

Owner

Microsoft Corporation (Redmond, WA) · Parent country: United States

Servers run by

Microsoft data centres; Anthropic as a subprocessor for Claude models · US company

Customer-held keys

Not recorded

Certifications

ISO 27001, ISO 42001 (Microsoft)

Worth knowing

Stored in Canada by contract, processed outside it until Microsoft's in-country processing reaches Canada. An admin can turn Anthropic's models off in the Microsoft 365 admin center.

Caveats

Microsoft now calls it Microsoft Copilot (Microsoft Learn, updated 2026-08-18); the Product Terms still say Microsoft 365 Copilot. Schools and universities: without the Advanced Data Residency for Education add-on, the Product Terms let Microsoft store an Office 365 Education tenant's data "anywhere within the European Union or North America". Ask Microsoft where Claude models process a Canadian tenant's prompts; its pages don't say.

What the rules say about this

• US CLOUD Act: The owner is a US company: storing data in Canada does not take it out of reach of US legal process.
• Nova Scotia public bodies: Storage and access must both be in Canada: check support access and backups, not only storage.
• Québec Law 25: Canada is not Québec: storage in Toronto still needs a privacy impact assessment for Québec data.
• OCAP®: Data held by any outside vendor is not in the Nation's possession, whoever owns the vendor.

Summaries only; each rule page links the law or regulator. Not legal advice. Before you sign with Microsoft 365 Copilot, ask the 15 questions in the printable vendor questionnaire.

Canadian alternatives to Microsoft 365 Copilot

Other ai assistants listings that are Canadian-owned, not US-owned, or self-hostable.

Compare the alternatives to Microsoft 365 Copilot side by side

Sources

All checked 2026-10-17. Claims about storage and ownership rest on the vendor's own pages (or its parent's); supporting links can include regulators and program lists.

• Where the data is stored: https://learn.microsoft.com/en-us/microsoft-365/enterprise/m365-dr-product-terms?view=o365-worldwide
• Who owns it: https://www.microsoft.com/en-us/privacy/privacystatement
• Supporting page: https://learn.microsoft.com/en-us/copilot/microsoft-365/microsoft-365-copilot-privacy
• Supporting page: https://www.microsoft.com/en-us/microsoft-365/blog/2025/11/04/microsoft-offers-in-country-data-processing-to-15-countries-to-strengthen-sovereign-controls-for-microsoft-365-copilot/
• Supporting page: https://learn.microsoft.com/en-us/microsoft-365/copilot/connect-to-ai-subprocessor
• Supporting page: https://learn.microsoft.com/en-us/microsoft-365/enterprise/m365-dr-workload-copilot?view=o365-worldwide

Report a correction to this listing

<a href="https://heldincanada.ca/vendors/microsoft-365-copilot/"><img src="https://heldincanada.ca/vendors/microsoft-365-copilot/badge.svg" alt="Microsoft 365 Copilot on Held in Canada" height="22"></a>