Sovereign Data Policy
We believe that where your data lives—and who controls the hardware it sits on—matters. Our Sovereign Data Policy ensures your information stays beyond the reach of US-controlled jurisdictions.
1. The Problem with US-Controlled Cloud
Most modern software runs on US-based infrastructure (AWS, Microsoft Azure, Google Cloud). Even when these providers use datacenters located in Canada, they are US-controlled companies. Under legislation like the US CLOUD Act, the US government may claim jurisdiction over data stored by these companies regardless of where the physical servers are located.
2. Non-US Infrastructure
EURA takes a different approach. We explicitly avoid US-controlled cloud providers for our core application and case management data. Instead, we use providers like OVHcloud that operate datacenters within Canada but are not subject to US jurisdictional overreach.
This means:
- The physical servers are located on Canadian soil.
- The infrastructure provider is not a US-controlled entity.
- The data is subject to Canadian privacy laws without the complication of the US CLOUD Act.
3. True Data Sovereignty
Data sovereignty is the idea that data is subject to the laws of the country in which it is collected and processed. By ensuring our infrastructure resides within Canadian datacenters managed by non-US entities, we provide our clients with a superior level of data sovereignty.
4. Impact on Case Management
For teams handling sensitive operational data, legal cases, or private citizen information, this distinction is critical. It provides a layer of protection against extra-jurisdictional data requests and ensures that your data remains under the protection of the Canadian Charter of Rights and Freedoms and PIPEDA.
5. Third-Party Exceptions
While our core application and database infrastructure follow this policy, we may use specialized global providers for non-sensitive edge services (such as Content Delivery Networks for static assets or privacy-focused analytics). These services never handle your core case data or sensitive operational information.
6. Our Commitment
We will continue to prioritize Canadian infrastructure as we grow. If we are ever required to change our infrastructure providers, we will maintain our commitment to data sovereignty as a core principle of our service.
Last Updated: April 29, 2026