Data Residency
Safe For The Office™ is hosted entirely in Canada. All persistent platform data is stored in AWS ca-central-1 — the AWS Canada (Central) region located in Montréal, Québec.
- Application server: AWS ca-central-1 (Canada)
- Database: AWS ca-central-1 (Canada)
- Secrets management: AWS ca-central-1 (Canada)
- Deployment artifacts: AWS ca-central-1 (Canada)
- No participant data crosses any border — it never leaves server memory
Canadian Hosting Strategy
Safe For The Office™ was built for Canadian workplaces. From the beginning, the platform has been hosted exclusively on AWS infrastructure in the ca-central-1 region, which is physically located in Montréal, Québec, Canada.
This means that all persistent data — facilitator accounts, room records, audit logs, and operational events — is stored and processed within Canada. Data does not leave Canada for storage or processing.
Infrastructure Components and Locations
| Component | Service | Location |
|---|---|---|
| Application server | AWS EC2 | ca-central-1 (Canada) |
| Database | AWS RDS PostgreSQL 16 | ca-central-1 (Canada) |
| Secrets management | AWS Secrets Manager | ca-central-1 (Canada) |
| Deployment artifacts | AWS S3 | ca-central-1 (Canada) |
| TLS certificates | Let's Encrypt | Issued globally, stored on EC2 in Canada |
What Data Is Stored in Canada
The following data is stored in the Canadian database (AWS RDS, ca-central-1):
- - Facilitator account records (email, display name, password hash)
- - Room lifecycle records (room codes, states, timestamps)
- - Content pack and activity configuration
- - Facilitator entitlements
- - Administrative audit log
- - Operational event records (anonymized room lifecycle events)
What Is Not Stored Anywhere
Participant names and responses are never written to any database or storage system — Canadian or otherwise. They exist only in the application server's active memory during a live session. When the session ends, they are gone. There is no cross-border transfer of participant data because participant data is never persisted at all.
Deployment Pipeline
The deployment pipeline uses GitHub Actions, which runs on GitHub's infrastructure outside Canada. However, the pipeline does not process or store any user data. It builds the application code, uploads the compiled artifact to an S3 bucket in ca-central-1, and instructs the Canadian EC2 instance to deploy it. No user data passes through the pipeline.
Third-Party Services
Safe For The Office™ does not use third-party analytics services, advertising networks, or data brokers. No user data is shared with or transmitted to external services outside the AWS infrastructure described above.
For Procurement Teams
If your organization requires written confirmation of data residency for a vendor assessment or privacy impact assessment, contact us using the form below. We can provide a written statement confirming that all persistent platform data is stored in AWS ca-central-1 (Canada).
Contact us for procurement documentation →Last reviewed: October 2026