Part of Data sovereigntySovereignty · Explainer

Quebec’s digital sovereignty statement, explained.

On February 13, 2026, Quebec’s Ministère de la Cybersécurité et du Numérique published a policy statement on digital sovereignty and IT procurement. It does not bind anyone yet: it is the foundation for a future government policy. If that policy is adopted, public bodies would have to align their IT projects and purchases with it. It places no obligation on private companies.

Facts checked

What it is

The Énoncé de politique de souveraineté numérique et d’approvisionnement en technologie de l’information was presented by Minister Gilles Bélanger on February 13, 2026. It describes itself as a founding political act (“un acte politique fondateur”) and a strategic base that “servira de point d’ancrage pour élaborer une politique”.

It defines digital sovereignty as a state’s capacity to control its own infrastructure, technologies and data autonomously, and data sovereignty as data being subject to the laws of the country where it is located.

DocumentDateStatus
Énoncé de politique de souveraineté numérique et d’approvisionnement en TI †February 2026Policy statement; a future policy would build on it
Government announcement and decree †February 13, 2026Decree in force for up to 40 contracts

† Competitor details come from each vendor’s own published pages on the dates shown; prices and plans change, so check the vendor before you decide. Énoncé de politique de souveraineté numérique et d’approvisionnement en TI (2026-10-29) · Government announcement and decree (2026-10-29)

The eight orientations

Under two objectives: increase Quebec’s digital sovereignty, and maximize the economic benefits of IT spending.

  • Favour sovereign hosting of data in the Nuage gouvernemental du Québec and in the government’s data processing centres.
  • Ensure control of data through data centres under Quebec jurisdiction.
  • Free software and custom-built solutions.
  • A modern development platform.
  • International best practices.
  • Use the room the contracting rules allow.
  • Local expertise.
  • Preserve major IT investments in Quebec.

What it says about cloud suppliers

It wants sensitive information to stay “sous juridiction québécoise, dans des environnements contrôlés localement”, mainly through the government’s own cloud. As a complementary measure it names data centres owned by the governments of Quebec or Canada, or by Quebec or Canadian companies, so that data held by the public administration stays in Quebec or Canada, “inaccessibles à de tiers étrangers”.

It does not set a hard test of ownership or jurisdiction for suppliers. Its wording is conditional: the state “pourrait” frame its IT purchases better by adding strategic clauses to contracts. It also says major foreign IT investments in Quebec should be preserved.

The decree that came with it

The same day, the government announced a decree allowing the ministry to sign up to 40 contracts under conditions different from those of the Act respecting contracting by public bodies. Some hardware and software contracts will be reserved for companies located in Quebec or Canada.

The Nuage gouvernemental du Québec

The government cloud is an infrastructure-as-a-service offering run by the ministry for ministries and public bodies, including for information judged sensitive. It is not open to private companies.

SourceWhat it says
Government cybersecurity and digital strategy 2024–2028, axis 3 †The NGQ is an IaaS cloud service offered by the ministry to ministries and public bodies

† Competitor details come from each vendor’s own published pages on the dates shown; prices and plans change, so check the vendor before you decide. Government cybersecurity and digital strategy 2024–2028, axis 3 (2026-10-29)

The federal picture

  • Shared Services Canada issued a request for information on a sovereign public cloud in August 2025 and says it has launched a procurement process for sovereign Canadian cloud capabilities.
  • The federal Buy Canadian policy came into force on December 16, 2025.
SourceDate
SSC Question Period note on sovereign cloud †February 9, 2026
Buy Canadian policy announcement †December 2025

† Competitor details come from each vendor’s own published pages on the dates shown; prices and plans change, so check the vendor before you decide. SSC Question Period note on sovereign cloud (2026-10-29) · Buy Canadian policy announcement (2026-10-29)

What it means today

  • For a private company: nothing changes yet. Your obligations on personal information come from Law 25.
  • For a public body: nothing binding until a policy is adopted, but the direction is set: data under Quebec jurisdiction, with Quebec or Canadian ownership as the complement to the government’s own cloud.
  • For a vendor selling to public bodies: expect contract clauses on data location and foreign access, and some contracts reserved for Quebec or Canadian companies.
  • Where Canner stands: servers in Montréal and a Canadian-owned company with no US parent. That matches the direction of the statement; there is no certification or list to be on yet.

Questions

Is the statement law?

No. It is a policy statement that a future government policy would build on. Only if that policy is adopted would public bodies have to align their IT projects and purchases with it.

Does it apply to private companies?

No. It is about the public administration’s own IT. Private companies’ duties on personal information come from Law 25.

Does it ban US cloud providers?

No. It favours the government’s own cloud and data centres under Quebec jurisdiction, names Quebec or Canadian ownership as a complementary option, and says major foreign IT investments in Quebec should be preserved.

Host in Quebec, with a Canadian owner.

Every Canner project runs in Montréal, on a platform with no US parent.