Public money deserves a careful platform.
StreamBuild is built for organizations that answer to funders, boards, and the public. Here is how we handle your data.
Canadian data residency
Your records are stored in Canadian regions, in a database dedicated to your agency, and optionally one you host yourself in your own account. AI inference is the exception. Today it runs on a US-hosted model provider. A Canadian inference option is on our roadmap for October 2026, and until it ships we say so rather than implying otherwise.
Zero data retention AI
AI runs under zero data retention terms. Your records are never stored by the model or used to train it.
Tenant isolation
Each agency gets its own database. One tenant can never see or reach another tenant's data.
Audit everything
Every change is recorded with a name and a timestamp, written in the same database transaction as the change itself, so the history cannot drift from the data. You can read a record’s full history in the app today; a bulk export for auditors is not built yet.
Sovereign Canadian hosting
For tenants with OCAP, federal, or regulated requirements, StreamBuild offers a sovereign tier operated on Canadian owned, Protected B assessed infrastructure. We describe it honestly as an option, and we will walk your team through exactly what it covers.
Compliance roadmap
We state our status plainly. We do not hold SOC 2 Type II. It is on our roadmap. We will describe an audit as underway only once an auditor is engaged and we can name the observation period. A security whitepaper is available on request today.
See how Owned AI governs every generation →