Your email data is stored in Canada
Not a US provider's Canadian region. The hardware, the database and the backups are all in Canada, under contract with OVH's Canadian operating company. We will also tell you plainly what that does not cover — see “What we do not claim” at the end of this page.
🇨🇦 HOSTED IN CANADAWhere your data physically lives
The production server is in Québec, under contract with OVH's Canadian operating company; OVH's parent is French. Nightly backups are stored in Canada too. No US cloud service sits in the path.
No US subprocessor touches message content. Site analytics are a self-hosted, cookieless Matomo, not Google Analytics.
Why ownership matters, not just the data centre
A company answers to the law of the country it belongs to, wherever it puts its servers. A US-owned provider's Toronto region is still operated by a US company. That is why we publish who owns us rather than only where the disks are: Ozonagram Ltd is a Canadian federal corporation with no office, staff or infrastructure in the United States.
That is a statement about corporate structure, not an accusation — we are not claiming any provider has handed anything over. And we will not tell you we are beyond the reach of any particular foreign law, because that is a legal conclusion we are not in a position to guarantee. What we can tell you is what we would do: if any authority demands data, we disclose only what we are legally compelled to disclose, tell you before we do unless the law forbids it, and refer them to you where we can.
Encrypted at rest — and exactly how far that goes
The PostgreSQL data directory lives on a LUKS2-encrypted volume, separate from the boot disk.
The honest scope: this protects against a stolen or decommissioned disk and against a leaked snapshot. It does not protect against a full compromise of the running server, because the unlock key has to be readable at boot. That is the precise wording our data-processing annex carries, and we would rather put it on the marketing page than let you infer something larger.
Backups the server itself cannot read
Each night the database is streamed straight into public-key encryption (age) — no plaintext ever touches disk — and uploaded within Canada. The server holds only the public key.
Which means a compromised machine cannot decrypt its own backups. The private key stays offline with the operator, and a monthly restore test proves the backups actually restore rather than merely existing.
What we do not claim
Delivery leaves Canada. Sending a message transmits it to your recipient's email provider, wherever that provider operates. If they use Gmail or Outlook, their copy is on US infrastructure the moment it arrives. No email service can change this, and anyone promising end-to-end Canadian delivery is describing something email cannot do. What we control — storage, processing, logs, backups — is Canadian.
We run the service from Ontario. Your data is hosted in Québec, but Zedmail is administered from Ottawa — so a customer under Québec's Law 25 is using a provider outside Québec and has its own assessment to complete. We will give you what you need for it. CASL, Law 25 and GDPR are supported throughout: one-click unsubscribe (RFC 8058), irreversible erasure on request, and the whole interface in French and English.
Procurement questions?
We answer sourcing questions in writing — subprocessors, data location, retention, encryption. Ask for whatever your review needs.
Create an account