Article content

A new warrant was issued, and Microsoft did hand over those emails. “Stored in Canada” is a marketing line, not a legal shield. 

Article content

Comparative cloud jurisdiction risk 

Article content

Article content

Many Canadian IT leaders will tell you that critics say ownership is a weak proxy for security, and that a walled-off domestic cloud risks being pricier and a step behind the state of the art. They are right that owning a thing is not the same as controlling it, and that standing up a Canadian copy with no legal teeth accomplishes nothing.  

Article content

But the fight was never about protectionism. It is about compellability; about who has the legal power to reach in and seize Canadian records.  

Article content

This is not about painting a data centre red and white. It is about enforceable Canadian control over access, key management and exposure to foreign law. 

Article content

Our current government does inspire hope.  

Article content

The federal Digital Sovereignty Framework from November 2025 and Shared Services Canada’s March 2026 sovereign cloud RFI, the one that invoked the national security exception to step around our trade obligations, are real movements.  

Article content

Budget 2025 put $925.6 million over five years toward public AI compute, and Bell and Telus are pouring concrete for sovereign data centres, according to Business in Vancouver. It is a good but small start.   

Article content

Article content

Bank of America projects China’s total AI capital spending will reach as much as US$98 billion in 2025, roughly US$56 billion of it government-led, according to South China Morning Post.   

Article content

European governments are marching civil servants off American platforms, as seen with France’s recent decision to shift civil servants off U.S. collaboration tools. It is fair to say that Canada still has a way to go. 

Article content

The way forward 

Article content

Government sets the security bar and pools public demand, so there is a market worth building for. Industry builds the platform. Canadian venture capital (VC) funds it, so the ownership, the board seats and the IP stay here instead of getting bought out and shipped south the moment it works.  

Article content

If Canadian VCs won’t back Canadian sovereignty, I would genuinely like to know why they are here. We need real partnership, not a working group. 

Article content

The reason organizations stay captured in today’s cloud providers isn’t loyalty; it is pain. Egress fees, rewrites, database lock-in engineered to make the exit hard to find. 

Article content

This initiative must then also fund the boring, unglamorous transition tooling that automates moving workloads out. Nobody stays on a foreign cloud because they love it. They stay because leaving feels like digital quicksand. 

Article content

Article content

Sovereignty isn’t a posture we can scramble to assemble mid-crisis. It is a capability we must build long before the crisis shows up. Canada has a narrow window now, and that window is a political choice, not a technical wall.  

Article content

To be taken seriously, our sovereign cloud must be backed by an Act of the House of Commons. It must assure our ownership while carrying the political weight and money of a national critical infrastructure project.  

Article content

A permanent statutory mandate is what tells the market this is real. 

Article content

What leaders should do now 

Article content

For business and government leaders, the first moves cost nothing but attention. Find out where your data actually lives and whose law governs it, then ask your provider, in writing, who can compel access to it and to your encryption keys.  

Article content

Hold your own keys where you can, rather than letting the provider hold them for you. Demand a training-data bill of materials from any AI vendor before you trust its model with a real decision.  

Article content

Write portability and exit terms into your next cloud contract now, while you still hold the upper hand, so that leaving is an option and not a threat. And classify the handful of workloads that are too sensitive to ever sit under a foreign court, because those are the ones to move first.