--- title: "Munia · Data Security and Sovereignty in Quebec" description: "Your data is hosted in Canada. Canadian infrastructure, AES-256 encryption, Law 25 compliant, zero-retention inference. Never used to train AI." url: https://munia.ai/en/securite/ lang: en-CA last_updated: 2026-09-23 --- Security and sovereignty · Built in Quebec # Your data stays in Quebec . Protecting your citizens' data is not optional, it is a requirement. Munia is hosted on Canadian infrastructure, encrypted end to end, compliant with Law 25, and model inference runs under zero-retention contracts. [Book a demo](/en/demande-demo-munia/) [Explore the platform](/en/) Hosted in Quebec Law 25 AES-256 SOC 2 in progress Digital sovereignty ## Three guarantees, one promise. A Quebec platform, designed and built for municipalities, so you can use AI in your work processes with full confidentiality. ### Servers in Quebec Infrastructure hosted exclusively on servers located in Quebec. - No transfer to American or international servers - Lower latency and optimal performance in Quebec ### Quebec and Canadian jurisdiction Canadian hosting, under Quebec and Canadian jurisdiction, with a non-American provider. - Quebec and Canadian jurisdiction only - No foreign authority can access your data ### A Quebec company Munia is operated by Carange Solutions, based in Montreal. - Development and data management 100% in Quebec - Committed to Quebec's digital sovereignty 01 The Munia perimeter ## Your citizens' data is hosted in Canada, under your rules. Every layer of Munia is designed around the obligations of Quebec municipal organizations, from hosting to encryption to access logging. Hosted in Quebec, Canadian jurisdiction Data stored in Canada, under Quebec and Canadian jurisdiction. AES-256 encryption and TLS 1.3 Data encrypted at rest and in transit. SSO and access logging. Compliant with Law 25 Personal information protection by default. Annual audit, SOC 2 in progress. Never used to train models Your municipal content never feeds any public model. Quebec perimeter Data in Quebec Law 25 AES-256 SOC 2 in progress Full transparency ## What we will never do. ### Train models with your data Your resolutions, minutes and communications are never used to train public models. They stay yours. ### Store your data abroad Your documents and conversations are hosted in Canada. When an AI model is called, inference may take place outside the country under a zero-retention contract: the provider keeps nothing. ### Resell or share your information Your data is never sold, rented or shared with third parties. Access is strictly controlled and logged. Under the hood ## Standards that meet public sector expectations. Encryption AES-256 · TLS 1.3 At rest and in transit, on every exchange. Access SSO and logging Single sign-on and full access traceability. Compliance Law 25 · SOC 2 in progress Protection by default and an independent annual audit. Hosting In Canada Servers in Quebec. Inference under zero-retention contracts. Frequently asked questions ## Your questions about security. ### Where is our data hosted? In Quebec, on Canadian infrastructure. AES-256 encryption at rest and TLS 1.3 in transit, access management and logging. Compliant with Law 25, with an annual audit and SOC 2 certification in progress. ### Is our data used to train models? Never. Your municipal content is not used to train public models, and AI providers use it for nothing other than answering your request. ### What is the Cloud Act and why does it matter? The Cloud Act is a U.S. law that can compel an American provider to hand over data, even when it is hosted outside the United States. Munia hosts your data in Canada, under Quebec and Canadian jurisdiction, with a non-American provider, and frames processing by model providers with zero-retention contracts: nothing is kept on their side. That strongly reduces exposure, without claiming the absolute. ### Is Munia compliant with Law 25? Yes. Personal information protection is applied by default. Munia is operated by Carange Solutions, a Quebec company, with an annual audit and SOC 2 certification in progress. ### Who can access our content? You, and the people you authorize. Single sign-on governs connections and every access is logged. Your data is never shared with third parties. ## Adopt AI without giving up sovereignty over your data. Book a demo and see how more than 140 Quebec municipalities and RCMs work with Munia, with full confidence. [Book a demo](/en/demande-demo-munia/)