Truly Canadian Sovereign VPS: 5 Hosts Compared
Published 2026-10-01
The three-test rule
If you sell to Canadians and claim "sovereign," three things must all be true:
- Canadian-owned — incorporated in Canada, not a branch or reseller of a foreign parent.
- Canadian-geolocated — the VM, its disk, and its backup all stay in Canada.
- Canadian-law — PIPEDA plus Quebec Law 25 where it applies, outside US PRISM / Patriot / CLOUD Act reach by default.
That test excludes the usual shortlist on purpose. AWS ca-central-1 is Canadian residency but US-controlled. OVH Beauharnois is Canadian soil but EU-owned. ThinkOn and eStruxture are Canadian-owned but enterprise-only — ThinkOn sells VMware VDC slices (quote-only, roughly $300–600/mo), eStruxture sells colo cabinets. Neither sells a VPS, so neither appears below.
What follows is VPS only: root access, hourly or monthly, roughly $4–20 to start.
The five
| Host | From | Sovereignty proof | Trade-off |
|---|---|---|---|
| Sucura Networks — Toronto + Montreal, AS398999 | $3.75/mo TO / $7.50/mo MTL (1 vCPU, NVMe, 10 Gbps, DDoS incl) | Canadian-owned operator, own Toronto↔Montreal backbone, same ASN both cities. Montreal PoP in a carrier-neutral facility carrying ISO 27001 / SOC 1+2 / PCI DSS | Cheapest Toronto-only option — ideal keys box. Small team, newer brand: ask for the no-replication letter before you depend on it |
| ServaRica (Rica Web Services Inc) — Montreal only | ~$4/mo VPS, storage plans to 3 TB | Quebec-incorporated since 2010, owns hardware + multi-homed network, ARIN IPs direct, no oversell, RAIDZ2, 99.99% SLA with cash refunds, 100% Hydro-Québec | Best price per GB, 14-year track record. Single region; bandwidth ramps 250 Mbps → 1 Gbps over time; NVMe plans go out of stock |
| Web Hosting Canada (WHC) — Montreal | Cloud VPS from C$18.50/mo | Privately owned Canadian company since 2003, 75,000 customers, ICANN + CIRA accredited | Mainstream pick: 24/7 bilingual phone/chat and a full cPanel/WordPress ecosystem. Higher entry price, less disk per dollar |
| CanSpace Solutions — Beauharnois, QC | Custom (ask) | 100% Canadian owned, staffed, and hosted since 2005, CIRA-certified registrar, bills in CAD only. Beauharnois DC: SOC 2 + ISO 27001 + PCI DSS, hydro-powered | Compliance pick: the SOC 2 / CIRA / CAD-invoice packet auditors accept. Smaller catalog, web-host culture rather than dev-cloud culture |
| Servury (Avalanche Systems Inc) — Montreal, own hardware | ~$15.59/mo VPS; confidential Blackbox 2 vCPU/4 GB/50 GB at $9.99 | Montreal own-hardware; LUKS2 disk key you hold, SEV-SNP encrypted-memory option, BYOIP + user-managed rDNS | Privacy pick: confidential compute nobody else offers at this price. Higher base, some plans out of stock |
Which one holds keys?
Keys need almost nothing: 1–2 vCPU, 2–4 GB RAM, 40–60 GB NVMe, one Canadian city, LUKS, backup stays in Canada, KEK never leaves.
- Tightest budget: Sucura Toronto $3.75 or ServaRica Montreal ~$4.
- Untrusted hypervisor: Servury Blackbox $9.99 with SEV-SNP and a key you hold.
- Auditor in the room: CanSpace or WHC — more per GB, but the SOC 2 / CIRA / CAD-invoice packet closes the finding.
The pattern we recommend: Authentik OIDC+MFA plus SOPS/age (OpenBao/Vault later) on the VPS; AWS ca-central-1 keeps AES-256-GCM ciphertext only. Total stays around $120/mo ($111 AWS + ~$10 VPS) versus roughly $300–600 for a ThinkOn VDC doing the same job.
Ask every vendor before keys move
- Incorporation + ownership (number, province)?
- Exact building + certs (SOC 2 Type II date, ISO 27001 scope)?
- Backup region in writing — Toronto-only / Montreal-only, no replication?
- Disk encryption at rest + who holds the key? Can I bring LUKS/SEV-SNP?
- CAD invoice, Canadian support, CA-geolocated IPs?
No to any one of these means not sovereign, whatever the homepage says.
Prices checked October 2026, CAD unless marked USD. VPS prices move; the three-test rule doesn't. ThinkOn VDC figures are anchored estimates, not quotes — get yours in writing. Companion piece: VPS vs VDC: price and when to switch.