Canner for Accounting Firms.
Client financials, T4s, and SINs shouldn’t sit on US infrastructure. Your firm’s tools don’t have to.
Canner hosts document intake, client portals, and internal accounting tools on Canadian-owned infrastructure in Quebec — financial records stay under Canadian law.
Accounting and bookkeeping firms hold some of the most sensitive data a business has — financial statements, payroll, SINs, tax filings. That data sits under the CPA provincial rules of professional conduct, the Income Tax Act’s confidentiality provisions (s. 241), PIPEDA, and Quebec’s Law 25. When a firm builds its own tool to streamline intake or client communication, the question is the same as always: where does the data live? A US-hosted app is exposed to the CLOUD Act. Canner keeps everything in Montreal, on Canadian-owned infrastructure, so your firm can build without inheriting a cross-border liability.
Highly sensitive financial data
SINs, payroll, and full financial pictures are exactly the data breach-notification and privacy law take most seriously. Where it’s hosted matters.
Seasonal tool-building
Tax season drives a rush of small internal tools — intake trackers, checklist apps, client reminders. They get built fast and hosted wherever’s easy, which is usually the US.
Client trust is the product
A single question — “is my data in Canada?” — can decide a client relationship. Firms want to answer it with a clear yes, not a hedge about regions.
Secure document intake
A branded upload form or client portal where clients submit tax documents, stored in a Postgres database and object storage hosted in Montreal.
Internal trackers & dashboards
Engagement trackers, deadline dashboards, and reconciliation helpers — small apps behind a private URL, with scheduled jobs for reminders and scheduled SQL for recurring reconciliation reports.
AI document & data helpers
Host an AI helper for classifying or summarizing documents with your API key kept server-side, so client financials never leave your Canadian server.
Client-file recovery you control
Recover a client database to a point in time (dedicated instance with point-in-time recovery, $9/mo), keep encrypted backups you can copy to your own bucket, and use scheduled SQL to refresh reconciliation and reporting tables.
Canner is 100% Canadian-owned and hosts only in Montreal, Quebec — not subject to the US CLOUD Act. That’s a clean answer for PIPEDA and Law 25, and for clients who ask where their financial data lives. A signed Data Processing Agreement and a data-residency attestation are available for your compliance file, with the Compliance add-on ($29/mo).
Where is client data stored?
In Montreal. Compute, managed Postgres, and object storage all run in Quebec, and Canner has no US affiliate — so no CLOUD Act exposure.
Can I store uploaded documents?
Yes — object storage is included on every tier, hosted in Montreal, so client documents stay in Canada alongside your database.
Do you provide a residency attestation?
Yes — a signed data-residency attestation and a DPA both come with the Compliance add-on, along with your audit log.
Is it affordable for a small firm?
Yes. The Starter tier is free, and Live is a flat $9/mo with no per-seat fees — the whole firm can use it under one account.
Can we restore the database to a point in time, and who controls retention?
Yes. Add the dedicated instance ($9/mo per project) and you get point-in-time recovery with a window you choose, from 1 to 35 days. You restore any moment into a new database, never over the live one. Scheduled backups on every plan use a retention you set, and each backup is encrypted with its own key, destroyed when the backup is deleted. You can also copy backups to an S3-compatible bucket you own. Canner runs in a single region in Montreal, without automatic failover.
Build without the sovereignty headache.
Tell us about your use case and we’ll help you scope it — from a single internal tool to a firm-wide rollout. For detailed or regulated projects, this reaches our team directly.