Sovereign cloud and data strategy for Canadian public bodies
Data stored in Canada is not automatically under Canadian control. DSarchitek Inc. designs cloud and data platform strategies that keep public data under Canadian authority.
Residency is not sovereignty
Data residency means the data is stored in Canada. Data sovereignty means it stays under Canadian legal control. A Canadian cloud region run by a foreign provider can still be reached by foreign law, such as the US CLOUD Act, so residency alone does not keep public data under Canadian authority.
The practice treats that exposure as an architecture and contract risk to be managed in the design, not as a box ticked by choosing a Canadian region.
What the practice does
- Workload placement: which data and systems may run where, and under whose control.
- Contract requirements for vendors, covering encryption keys, backups, administrative access and foreign legal demands.
- Sovereign cloud standards for a ministry or program.
- Due diligence on cloud and data providers, with a register of each claim and how it was checked.
- Market analysis of Canadian sovereign AI, data and cloud operators.
Work behind it
For a Canadian provincial registries program, the practice set the sovereign cloud standard that treats US CLOUD Act and FISA exposure as a vendor contract risk. For an Indigenous majority-owned sovereign AI data centre program, it wrote the market analysis of Canadian sovereign AI, data and cloud operators and ran due diligence on vendors and service providers. See also sovereign data centre enclave design.