brief: "how we get sovereign cloud in Canada" audience: "business leadership and government policy makers" model: "anthropic:claude-opus-4-8" template: null
marp: true paginate: true
Sovereign Cloud for Canada
A path to digital self-determination for a mid-power nation
Sovereign Cloud for Canada
- A path to digital self-determination
- A policy brief for business leaders and government
<!-- Open with gravity and neutrality. This is a strategic question, not a partisan one. Frame the session as a structured argument: what's at stake, where we are, and a credible path forward. Signal that we'll deal in tradeoffs, not slogans. -->
The Strategic Stakes
- Data is now critical infrastructure — as vital as energy or transport
- Where data lives, and who can compel access to it, shapes national resilience
- Cloud dependence has quietly become a matter of sovereignty
- The decisions we defer today constrain the options we hold tomorrow
<!-- Set the frame at the highest altitude. The point is not fear but consequence: our economy, public services, and security increasingly run on cloud infrastructure we do not control. Sovereignty is about preserving future choice. -->
What 'Sovereign Cloud' Actually Means
- Not simply 'servers in Canada' — location is necessary but insufficient
- Data residency: where data is stored
- Data jurisdiction: which laws can compel access
- Operational autonomy: who runs, controls, and can withdraw the service
<!-- Demystify the term before debating it. Many equate sovereignty with a local data centre. True sovereignty spans residency, legal jurisdiction, and operational control. A foreign-owned data centre on Canadian soil can still be subject to foreign extraterritorial law. -->
Where Canada Stands Today
- The vast majority of cloud spend flows to non-domestic hyperscalers
- Strong connectivity and clean energy — genuine natural advantages
- Fragmented federal, provincial, and sector-specific data rules
- Real capability exists, but scale and coordination are lacking
<!-- Give an honest, balanced diagnosis. Canada is neither helpless nor self-sufficient. We have assets — energy, talent, geography — but our market is small, our rules are fragmented, and our spending underwrites foreign capability. Credibility comes from naming both strengths and gaps. -->
The Risks of Inaction
- Extraterritorial law can reach Canadian data held by foreign providers
- Concentration risk: outages or policy shifts abroad ripple through our systems
- Economic leakage: value and IP accrue elsewhere
- Erosion of leverage in future geopolitical and trade disputes
<!-- Make the cost of the status quo concrete without alarmism. Frame risk across four dimensions — legal, operational, economic, and geopolitical. The audience should feel that 'do nothing' is itself an active, expensive choice. -->
Lessons From Abroad
- EU: GAIA-X and data-space frameworks — ambition tempered by execution challenges
- France: SecNumCloud certification and 'trusted cloud' partnerships
- Australia: sovereign hosting certification for government workloads
- Common thread: sovereignty as a spectrum, delivered through standards, not walls
<!-- Position Canada within the global conversation. Others have tried; we can learn from both their progress and their stumbles. The key insight: successful models treat sovereignty as tiered and standards-driven rather than as full autarky. -->
Guiding Principles
- Sovereignty is a spectrum — match the tier to the sensitivity of the workload
- Openness over isolation: interoperability and exit rights, not walled gardens
- Build on strengths: energy, talent, and trusted institutions
- Pragmatism over purity — deliverable steps beat perfect blueprints
<!-- Offer the mental model that anchors the recommendations. Reject the false binary of total independence versus total dependence. Sovereignty should be proportionate, open, and buildable. This sets up the four pillars. -->
Pillar 1 — Domestic Infrastructure
- Anchor sovereign zones with Canadian clean-energy and cool climate advantages
- Support domestic and trusted-partner data-centre capacity at scale
- Prioritize critical workloads: health, finance, defence, public records
- Design for resilience and geographic distribution across regions
<!-- The physical foundation. Emphasize that our energy and climate advantages make Canada a natural host. The goal is not to host everything domestically, but to guarantee sovereign capacity for the workloads that matter most. -->
Pillar 2 — Legal & Jurisdictional Control
- Modernize and harmonize privacy and data-protection law across jurisdictions
- Establish clear rules on lawful access and foreign compulsion
- Define certification tiers for 'sovereign-grade' services
- Contractual guarantees: control, transparency, and the right to exit
<!-- Location without legal control is theatre. This pillar is about ensuring Canadian law governs Canadian data, and about creating certification tiers so buyers can distinguish genuine sovereignty from marketing. Harmonization across federal and provincial regimes is essential. -->
Pillar 3 — Talent & Ecosystem
- Cloud sovereignty needs operators, engineers, and security specialists at home
- Grow domestic cloud, cybersecurity, and platform-engineering firms
- Partner with universities and industry on skills pipelines
- A vibrant ecosystem prevents lock-in and sustains real autonomy
<!-- Infrastructure without people is inert. Sovereignty depends on a domestic talent base and a competitive vendor ecosystem. This is also where the economic upside lives — jobs, IP, and industrial capability that stay in Canada. -->
Pillar 4 — Procurement as Lever
- Government is the largest, most influential cloud buyer in the country
- Use procurement to set sovereignty standards and seed demand
- Reserve sensitive workloads for certified sovereign tiers
- Aggregate public-sector demand to make domestic capacity viable
<!-- The most powerful, least-appreciated tool. Public procurement can create the market that makes sovereign capacity commercially viable. Standards written into contracts move the whole ecosystem — no new law required to start. -->
A Pragmatic Model — Hybrid Sovereignty
- Tier workloads by sensitivity: public, protected, and sovereign-critical
- Global hyperscalers for commodity workloads; sovereign tiers for the rest
- Trusted-partner arrangements bridge scale and control
- Avoids both reckless dependence and unaffordable full autarky
<!-- This is the synthesis slide — the realistic recommendation. Not everything needs to be sovereign; forcing it would be wasteful. Tiering lets Canada concentrate scarce resources where sovereignty genuinely matters while retaining global economies of scale. -->
Roadmap — Three Horizons
- Now (0–12 mo): define certification tiers; classify critical workloads
- Next (1–3 yr): stand up sovereign zones; harmonize legal frameworks
- Later (3–5 yr): mature ecosystem, exit-ready contracts, sustained capacity
- Sequenced to de-risk investment and prove value early
<!-- Turn strategy into a phased plan. Horizons make the ambition credible and fundable. Early wins — classification and certification — cost little and build momentum before heavier infrastructure investment. -->
Governance & Accountability
- Name a clear owner for national cloud-sovereignty strategy
- Transparent metrics: workload coverage, certification uptake, exit readiness
- Regular public reporting to Parliament and industry
- Independent oversight to keep standards honest and current
<!-- Ambition without ownership drifts. Sovereignty efforts elsewhere have stalled on diffuse accountability. Recommend a single accountable body, measurable targets, and transparent reporting to sustain trust and momentum. -->
The Call to Action
- Sovereignty is about preserving choice — for our economy and our institutions
- Start now with certification tiers and workload classification
- Use procurement to seed demand; build talent and infrastructure in parallel
- The window is open — deliberate action today protects tomorrow's options
<!-- Close with resolve, not fear. Restate the thesis: this is about preserving national choice in a digital age. Leave the audience with a clear, low-regret first step and a sense that the moment for deliberate action is now. -->