Your data, on Québec soil.
Under Québec law.
Digital sovereignty isn't a marketing line for Béluga — it's the technical, legal and operational DNA of our service. Here's how, and why.
Our manifesto in seven principles.
Your data stays in Québec. All the time.
All our servers sit in Québec, in Québec data centers on dedicated infrastructure. Your emails, files, calendars and backups — no data leaves the province at any time. No cross-border replication, no U.S. CDN, no third-party analytics.
Béluga is a Québec company — period.
Béluga inc. is incorporated under the Québec Business Corporations Act. Our head office, shareholders, board of directors, team — everything is in Québec. No U.S. subsidiary, no parent company, no foreign investor.
Out of reach of U.S. extraterritorial laws.
The CLOUD Act (2018) and FISA Section 702 allow U.S. authorities to compel data held by any company under U.S. jurisdiction — even in Canadian data centers. Microsoft, Google, Amazon, Cloudflare and Salesforce are all subject to them. Béluga is not.
Loi 25 compliant by default, no configuration required.
Loi 25 imposes strict obligations on Québec organizations: PIA, rights of access and erasure, explicit consent, incident registry, privacy officer. Béluga is designed to help you meet those obligations without complex configuration.
Open source. Always auditable.
Béluga's code is fully open under AGPL-3.0, published in our public repo. Anyone can audit our security, verify our encryption, validate our retention policies. No proprietary black boxes. No technical lock-in.
Your data belongs to you. Forever.
You can export everything you have at any time, in standard formats (mbox, EML, vCard, iCal, native files), with no restriction. If you decide to leave Béluga, you walk away with everything you created.
Sovereign AI, or no AI.
When Matelot, our AI assistant, becomes available in early 2027, it will run on open models (Mistral, Qwen and other open models) hosted on our Québec servers. No customer data will be sent to OpenAI, Anthropic, Google or any other third-party AI provider.
Three data centers.
All in Québec.
Our infrastructure spans three Québec sites for resilience and high availability. No replication, no backups, no caches outside the province.
Montréal · primary site
Tier III certified data center. Hosts user accounts, live data and daily processing.
Québec · active replication
Synchronous replication of critical data. Automatic failover in case of an incident in Montréal, with no data loss.
Sherbrooke · cold backup
Encrypted offline backups, on disk, off the network. For recovery in case of major disaster.
Encryption keys · in Québec
Our HSMs are operated exclusively by our team in Québec. No encryption key is shared outside the province.
Why the "Canadian region"
of Microsoft is not enough.
Microsoft, Google and Amazon offer "Canadian regions" for their cloud services. That changes nothing about their exposure to U.S. extraterritorial laws.
Canadian data, U.S. jurisdiction.
- U.S. parent companies, subject to the CLOUD Act and FISA 702
- U.S. authorities can compel data without informing the customer
- Loi 25 compliance requires complex configuration and ongoing oversight
- DPAs imposed in English, State of Washington jurisdiction
- Cross-border replication possible depending on enabled services
- Announced 12 to 25 % price increase in 2026 on non-USD markets
Québec data, Québec jurisdiction.
- Incorporated in Québec, no U.S. subsidiary or owner
- Out of reach of the CLOUD Act and FISA 702 — no compulsion possible
- Loi 25 compliant by default, no configuration or ongoing vigilance required
- DPA in French, Québec jurisdiction, contracts under the Civil Code
- No replication outside the province, no U.S. CDN
- Pricing locked for 36 months, in Canadian dollars
Every Canadian
and Québec framework recognized.
Béluga meets the requirements of municipal audits, public tenders and professional firms that must demonstrate compliance.
Québec Loi 25
Native compliance with the Loi 25. All settings at the highest default.
Federal PIPEDA
Personal Information Protection and Electronic Documents Act. Automatic compliance for inter-provincial operations.
Municipal MAMH standards
Compliant with Ministry of Municipal Affairs requirements for retention, archiving and dissemination of municipal documents.
SOC 2 Type II
Annual audit by an independent firm of security, availability, integrity, confidentiality and privacy controls.
ISO 27001 (in progress)
Information Security Management System certification. Audit scheduled Q2 2026.
SEAO listing
Listed on the Québec authorized suppliers registry. Available in municipal and provincial public tenders.
Open source,
made in Québec.
Béluga relies on the world's best open-source foundations, integrated and operated by our team in Québec. No reinventing the wheel. No proprietary black boxes.
Integration, operations, security, support and the French interface are our work. Our integration code is itself published under AGPL-3.0 — you can audit it, verify it, fork it.
Promises written
into our contracts.
Not just slogans — each commitment below is written into our terms of service or DPA, and is legally enforceable.
Immediate notification of any government request
If a judicial authority asks for access to your data, we notify you immediately, unless the law explicitly forbids it. We publish an annual transparency report.
Your data never used to train models
Your emails, files and conversations are never used to train AI — neither ours nor a third party's. Written into our terms of service.
No sharing with third parties, under any condition
No reselling, no cross-referencing with data brokers, no third-party analytics, no advertising pixels. What you put in Béluga stays in Béluga.
Pricing locked for 36 months, in CAD
On every Standard or higher contract, prices are locked for at least 36 months from your signature. No hidden increases, no USD-CAD swings.
Full export in standard formats
You can export everything at any time, in standard formats (mbox, vCard, iCal, native files), for free. If you leave Béluga, you walk away with everything.
Code escrow with a Québec third party
Béluga's complete source code is deposited with an independent Québec third-party escrow. If the company disappears, your data and your instance remain recoverable.