Canner for Public Sector.
Public bodies are held to a residency standard most clouds can’t meet on ownership.
Canner hosts citizen-facing forms, internal tools, and small apps for municipalities, agencies, and public organizations on Canadian-owned infrastructure in Quebec — sovereignty by construction.
Public-sector organizations — municipalities, agencies, boards, Crown corporations — carry some of the strictest data-residency expectations in the country, written into the Government of Canada’s Cloud Guardrails and Protected B security profile, the Buy-Canadian procurement policy in force since December 2025, the federal Access to Information and Privacy (ATIP) regime, and provincial access-and-privacy laws (Ontario’s FIPPA, Quebec’s Act respecting access to documents). Citizens rightly expect their information to stay under Canadian jurisdiction. Teams want to modernize with small tools and citizen-facing forms, but most modern hosting is US-owned and CLOUD Act-exposed. Canner is Canadian-owned and Quebec-hosted — the standard public procurement, and the 2024 federal Digital Sovereignty Framework, are increasingly written around.
Residency mandates are getting stricter
The GC Cloud Guardrails, the Protected B profile, and the Buy-Canadian policy increasingly require Canadian data residency — and, in some cases, Canadian ownership and control. A US cloud region satisfies residency but not the ownership part; its parent stays CLOUD Act-reachable.
Citizen trust and transparency
Citizens ask where their data goes. “Under Canadian law, hosted in Quebec, Canadian-owned” is a clearer, more defensible answer than a regional add-on.
Limited technical capacity
Many public teams don’t run infrastructure. They need a platform simple enough to deploy a form or tool without standing up cloud accounts and networking.
Citizen-facing forms & portals
Permit requests, service intake, consultations — deployed as accessible forms writing to a Postgres database hosted in Montreal, over HTTPS.
Internal & inter-department tools
Trackers, dashboards, and reporting tools built as small apps behind a private URL, with scheduled jobs for recurring tasks.
Open-data & analysis workspaces
Publish an open-data microsite, or use the built-in Data Workshop to run SQL over datasets — all within a Canadian-hosted account.
Retention and recovery you decide
Set your own backup retention, add point-in-time recovery on a dedicated instance ($9/mo), keep encrypted backups with keys destroyed on delete, copy them to a bucket you own, and give analysts named read-only roles.
Canner is 100% Canadian-owned and operates solely from Montreal, Quebec — not a “US person,” not subject to the US CLOUD Act. That meets both the residency and the ownership expectations increasingly written into public procurement, and squares with PIPEDA and Law 25. A signed Data Processing Agreement and a data-residency attestation are available for your records, with the Compliance add-on ($29/mo); Enterprise adds a 99.9% uptime SLA and priority support.
Does Canner meet Canadian data-residency requirements?
Yes. All hosting is in Montreal, and Canner is Canadian-owned with no US affiliate — meeting both residency and ownership criteria, with a written attestation available.
Can we get documentation for procurement?
Yes — a DPA and a data-residency attestation come with the Compliance add-on ($29/mo), along with your audit log.
Is the platform available in French?
Yes. The dashboard, docs, and billing are fully bilingual (Quebec French), and the company operates from Quebec.
Can non-technical staff deploy a form?
Yes — drag-and-drop deploys work without any server administration. Developers can use GitHub push-to-deploy or the CLI.
Can we restore the database to a point in time, and who controls retention?
Yes. Add the dedicated instance ($9/mo per project) and you get point-in-time recovery with a window you choose, from 1 to 35 days. You restore any moment into a new database, never over the live one. Scheduled backups on every plan use a retention you set, and each backup is encrypted with its own key, destroyed when the backup is deleted. You can also copy backups to an S3-compatible bucket you own. Canner runs in a single region in Montreal, without automatic failover.
Build without the sovereignty headache.
Tell us about your use case and we’ll help you scope it — from a single internal tool to a firm-wide rollout. For detailed or regulated projects, this reaches our team directly.