Canner for Financial Services.
In finance, where the data lives is a governance question — not an implementation detail.
Canner hosts fintech apps, advisor tools, and internal dashboards on Canadian-owned infrastructure in Quebec, so client financial data stays under Canadian law and outside US legal reach.
Financial services — advisors, credit unions, lenders, fintech startups — operate under intense scrutiny around data governance: OSFI’s Guideline B-10 (third-party risk management) and B-13 (technology and cyber risk), FINTRAC obligations under the PCMLTFA, PIPEDA and Law 25, and, in Quebec, the AMF. Building your own tools is often faster than waiting on a vendor, but a US-hosted app introduces CLOUD Act exposure that governance, risk, and compliance teams won’t sign off on. Canner is Canadian-owned and Quebec-hosted, giving you a foundation your GRC team can actually approve.
GRC won’t approve US hosting
Governance, risk, and compliance reviews increasingly flag CLOUD Act exposure. A US-incorporated host is a finding, even with a Canadian region — it stalls projects.
High-value personal data
Account details, transaction history, and identity data are prime targets and heavily regulated. Residency and control aren’t optional.
Speed vs. control tension
Teams want to ship internal tools quickly; compliance wants control. The usual compromise is a slow vendor process. A sovereign platform removes the tradeoff.
Advisor & client portals
Secure portals and calculators that write to a Postgres database in Montreal, with custom domains and automatic TLS.
Internal ops & reporting
Reconciliation dashboards, KYC checklists, and reporting tools built as small apps, with scheduled jobs for recurring runs.
Data workspace for analysis
Run SQL over CSV extracts and your Postgres in the built-in Data Workshop, and schedule SQL to refresh reconciliation and reporting tables on a cadence — analysis stays inside your Canadian account, not a third-party BI cloud.
Recovery and read-only access for audit
Point-in-time recovery on a dedicated instance ($9/mo) with a 1 to 35 day window you set, encrypted backups you can copy to your own bucket, named read-only roles for analysts and auditors, and scheduled SQL for reconciliation tables.
Canner is 100% Canadian-owned and hosts solely in Montreal, Quebec — not a “US person,” not subject to the US CLOUD Act. That’s the affirmative answer GRC and procurement teams need for PIPEDA and Law 25. A signed Data Processing Agreement and a data-residency attestation are available (with the Compliance add-on ($29/mo); Enterprise adds a 99.9% uptime SLA with service credits).
Does this satisfy a CLOUD Act question in a security review?
Yes — Canner is Canadian-owned with no US affiliate, so it is not subject to the CLOUD Act. We provide a written attestation for your review file.
Can we get an uptime SLA?
Yes — the Enterprise plan includes a 99.9% uptime SLA with service credits and priority support.
Where does data analysis happen?
Inside your Canadian account. The built-in Data Workshop runs SQL over your data in Montreal, so you don’t export to a US analytics tool.
Is it Canadian-owned, or just Canadian-hosted?
Both. Canner is 100% Canadian-owned and operates solely from Quebec — there is no US parent or affiliate anywhere in the structure.
Can we restore the database to a point in time, and who controls retention?
Yes. Add the dedicated instance ($9/mo per project) and you get point-in-time recovery with a window you choose, from 1 to 35 days. You restore any moment into a new database, never over the live one. Scheduled backups on every plan use a retention you set, and each backup is encrypted with its own key, destroyed when the backup is deleted. You can also copy backups to an S3-compatible bucket you own. Canner runs in a single region in Montreal, without automatic failover.
Build without the sovereignty headache.
Tell us about your use case and we’ll help you scope it — from a single internal tool to a firm-wide rollout. For detailed or regulated projects, this reaches our team directly.