Home / Law 25 & data residency
Law 25 & data residency

Law 25 compliance & Canadian data residency for Quebec SMBs.

We put the technical foundations in place that help you meet Quebec's Law 25: Canadian hosting for our own infrastructure, residency settings on your tools, email security, access controls and a clear map of where your data lives. Plainly, and without overclaiming.

Core infra hosted in Canada Email security done right We tell you where data lives
In plain language

What Law 25 asks of your business.

A simplified view of what Quebec's modernized privacy law expects, so you know what we're solving for.

Clear consent

Collect personal information with consent that's clear and specific, and explain why you need it.

Data minimization

Only collect and keep what you actually need, for only as long as you need it.

A person in charge

Name someone responsible for protecting personal information and make them reachable.

Breach response

Have a plan to detect, handle and, when required, report incidents involving personal data.

Access & correction

Let people see, correct or ask you to delete the personal information you hold about them.

Privacy by default

Use settings and practices that protect privacy by default, not as an afterthought.

How we help you get there

The technical foundations, handled.

We don't write your policies for you, but we put the infrastructure and controls in place that make Law 25 far easier to meet.

Canadian-hosted core infrastructure

Our own platform runs on Canadian servers in Quebec, keeping core data on Canadian soil.

Residency set on your tools

For Microsoft 365 and Google Workspace we set the data-residency region and confirm where data is stored.

Email security done right

SPF, DKIM and DMARC plus proper DNS to protect against spoofing and phishing of personal data.

Access controls & MFA

Clear permissions and multi-factor authentication so only the right people reach the right data.

A clear data map

We document where each system stores data, so you can answer "where does it live?" with confidence.

Privacy policy & person-in-charge setup

We help wire up a privacy policy and a reachable contact for privacy requests, like the one on this very site.

Straight talk. "Hosted in Canada" applies to WonderCloud's own infrastructure. For Microsoft, Google and any third-party AI tools, we set the data-residency region and tell you exactly where data lives, so you can make informed choices. We say data residency, never "sovereignty," for tools we don't control.

This page is general information, not legal advice. Meeting Law 25 also depends on your own policies and practices; we're happy to point you to the right resources.
Law 25 questions

Answers, plainly.

What is Quebec Law 25?+
Law 25 modernizes Quebec's rules for protecting personal information. Among other things it asks businesses to obtain clear consent, limit the data they collect, name a person in charge of privacy, handle breaches properly and let people access or correct their information.
Does WonderCloud make us compliant with Law 25?+
We put the technical foundations in place that help you meet Law 25: Canadian hosting for our own infrastructure, residency settings on your tools, email security, access controls and a clear data map. This is general information, not legal advice, and compliance also depends on your internal policies.
Can we use Microsoft 365 or Google and still meet Law 25?+
Yes. For Microsoft 365 and Google Workspace we set the data-residency region and tell you exactly where data lives, so you can make informed choices. Our own core infrastructure runs on Canadian servers in Quebec.
What about third-party AI tools?+
When a workflow uses third-party AI, we're transparent about what runs where so you can decide what's acceptable. We don't overclaim sovereignty for tools we don't control.
Where is our data hosted?+
WonderCloud's core infrastructure runs on Canadian servers in Quebec. For third-party services we configure the data-residency region and document where everything sits.
Get started

Get your Law 25 foundations in place.

Tell us what you need and get a clear, fixed-price quote within one business day. Prefer to talk? Book a free call.