CloudCompliance

Canadian data residency checker

Most Canadian companies are not legally required to keep data in Canada. Some are, and many have promised it in a contract. This works out which applies to you.

Last reviewed 2026-09-30Written by Jacob Masse, TrazTech Inc.

Answer for the data set you are worried about. The answer appears on this page. It is a starting point, not legal advice: where a law or a contract is unclear, the answer says so.

Whose information is it?

Tick everything that applies.

What do your customer contracts say about location?

Where is the data stored today?

Who else touches it from outside Canada?

Tick all that apply.

How many people work at the company?

What the answer is based on

PIPEDA allows processing abroad with contractual protection and openness. Quebec's Law 25 requires an assessment before personal information is communicated outside Quebec. Health information laws and public sector rules vary by province, and custodians often require Canadian storage by contract. Bill C-36, introduced federally on 15 June 2026 and at second reading, would add a transfer assessment for data leaving Canada. The detail is on data residency in Canada and Law 25 cloud transfers.

Is this legal advice?

No. It sorts your situation into the rules that commonly apply and says what to check. A contract clause or a provincial rule for your specific customer can change the answer, and a privacy lawyer should confirm anything high stakes.

Need your residency position documented?

Firms in the network map data flows and write transfer assessments.

Get matched