Data residency

1. Where your data lives

StreamBuild stores customer records in Canadian regions. One category of processing leaves Canada today, and we would rather name it here than have you find it. AI inference runs on a US-hosted model provider. Your database, your files and your backups stay in Canada.

2. Standard hosting

The standard service runs on Google Cloud's Canadian region in Toronto. Data at rest is encrypted, and data in transit is encrypted with modern protocols. Each agency has its own isolated database.

3. AI processing location

Owned AI features send only the records named in the generation’s Context Manifest to an enterprise AI provider under zero data retention terms: content is not retained after the response and is not used for training. That provider is hosted in the United States. A Canadian inference option is on our roadmap for October 2026. A tenant that cannot wait can supply its own model endpoint today, and StreamBuild will refuse to fall back to the US default for a model scoped to another region. It fails the request rather than moving your data.

4. Sovereign Canadian tier

For tenants with OCAP, federal, or regulated requirements, StreamBuild offers a sovereign tier operated on Canadian owned, Protected B assessed infrastructure. We describe this option honestly and will walk your team through exactly what it covers before you commit.

• Canadian owned infrastructure
• Protected B assessed environment
• Suitable for OCAP commitments
• Fit for federal and regulated tenants

5. Backups

Backups are stored in Canadian regions with the same encryption and isolation as production data.

6. Documentation

We can provide a data residency letter, a subprocessor list, and a security whitepaper on request.