Quebec’s digital sovereignty statement, explained.
On February 13, 2026, Quebec’s Ministère de la Cybersécurité et du Numérique published a policy statement on digital sovereignty and IT procurement. It does not bind anyone yet: it is the foundation for a future government policy. If that policy is adopted, public bodies would have to align their IT projects and purchases with it. It places no obligation on private companies.
Facts checked
What it is
The Énoncé de politique de souveraineté numérique et d’approvisionnement en technologie de l’information was presented by Minister Gilles Bélanger on February 13, 2026. It describes itself as a founding political act (“un acte politique fondateur”) and a strategic base that “servira de point d’ancrage pour élaborer une politique”.
It defines digital sovereignty as a state’s capacity to control its own infrastructure, technologies and data autonomously, and data sovereignty as data being subject to the laws of the country where it is located.
| Document | Date | Status |
|---|---|---|
| Énoncé de politique de souveraineté numérique et d’approvisionnement en TI † | February 2026 | Policy statement; a future policy would build on it |
| Government announcement and decree † | February 13, 2026 | Decree in force for up to 40 contracts |
† Competitor details come from each vendor’s own published pages on the dates shown; prices and plans change, so check the vendor before you decide. Énoncé de politique de souveraineté numérique et d’approvisionnement en TI (2026-10-29) · Government announcement and decree (2026-10-29)
The eight orientations
Under two objectives: increase Quebec’s digital sovereignty, and maximize the economic benefits of IT spending.
- Favour sovereign hosting of data in the Nuage gouvernemental du Québec and in the government’s data processing centres.
- Ensure control of data through data centres under Quebec jurisdiction.
- Free software and custom-built solutions.
- A modern development platform.
- International best practices.
- Use the room the contracting rules allow.
- Local expertise.
- Preserve major IT investments in Quebec.
What it says about cloud suppliers
It wants sensitive information to stay “sous juridiction québécoise, dans des environnements contrôlés localement”, mainly through the government’s own cloud. As a complementary measure it names data centres owned by the governments of Quebec or Canada, or by Quebec or Canadian companies, so that data held by the public administration stays in Quebec or Canada, “inaccessibles à de tiers étrangers”.
It does not set a hard test of ownership or jurisdiction for suppliers. Its wording is conditional: the state “pourrait” frame its IT purchases better by adding strategic clauses to contracts. It also says major foreign IT investments in Quebec should be preserved.
The decree that came with it
The same day, the government announced a decree allowing the ministry to sign up to 40 contracts under conditions different from those of the Act respecting contracting by public bodies. Some hardware and software contracts will be reserved for companies located in Quebec or Canada.
The Nuage gouvernemental du Québec
The government cloud is an infrastructure-as-a-service offering run by the ministry for ministries and public bodies, including for information judged sensitive. It is not open to private companies.
| Source | What it says |
|---|---|
| Government cybersecurity and digital strategy 2024–2028, axis 3 † | The NGQ is an IaaS cloud service offered by the ministry to ministries and public bodies |
† Competitor details come from each vendor’s own published pages on the dates shown; prices and plans change, so check the vendor before you decide. Government cybersecurity and digital strategy 2024–2028, axis 3 (2026-10-29)
The federal picture
- Shared Services Canada issued a request for information on a sovereign public cloud in August 2025 and says it has launched a procurement process for sovereign Canadian cloud capabilities.
- The federal Buy Canadian policy came into force on December 16, 2025.
| Source | Date |
|---|---|
| SSC Question Period note on sovereign cloud † | February 9, 2026 |
| Buy Canadian policy announcement † | December 2025 |
† Competitor details come from each vendor’s own published pages on the dates shown; prices and plans change, so check the vendor before you decide. SSC Question Period note on sovereign cloud (2026-10-29) · Buy Canadian policy announcement (2026-10-29)
What it means today
- For a private company: nothing changes yet. Your obligations on personal information come from Law 25.
- For a public body: nothing binding until a policy is adopted, but the direction is set: data under Quebec jurisdiction, with Quebec or Canadian ownership as the complement to the government’s own cloud.
- For a vendor selling to public bodies: expect contract clauses on data location and foreign access, and some contracts reserved for Quebec or Canadian companies.
- Where Canner stands: servers in Montréal and a Canadian-owned company with no US parent. That matches the direction of the statement; there is no certification or list to be on yet.
Questions
Is the statement law?
No. It is a policy statement that a future government policy would build on. Only if that policy is adopted would public bodies have to align their IT projects and purchases with it.
Does it apply to private companies?
No. It is about the public administration’s own IT. Private companies’ duties on personal information come from Law 25.
Does it ban US cloud providers?
No. It favours the government’s own cloud and data centres under Quebec jurisdiction, names Quebec or Canadian ownership as a complementary option, and says major foreign IT investments in Quebec should be preserved.
Related
- BlogCanada's AWS Alternative — By Accident
- BlogWhy We Moved Canner Off a Fleet of Virtualized Servers and Onto Our Own Hardware
- BlogHow to Build a 100% Canadian Stack
- BlogA Weekend on the Wrong End of the Stack
- BlogData Sovereignty Isn't Just a Quebec Problem: PIPEDA, BC & Alberta PIPA, and the CLOUD Act
- BlogIs AWS Canada Subject to the CLOUD Act?
Host in Quebec, with a Canadian owner.
Every Canner project runs in Montréal, on a platform with no US parent.