Compliance

Canium is built for organizations that operate under Canadian regulatory obligations. The architecture positions the organization — not Canium — as the party responsible for communications compliance.

Canadian Sovereignty — What It Actually Means

All communications infrastructure — every call and every message — is physically located in Ontario, Canada. No call content, message content, or key material transits US networks.

This matters for:

• Federal and provincial procurement — CCCS guidance and Government of Canada cloud frameworks require Canadian data residency for Protected B and above.
• PIPEDA compliance — all communications data (calls and messages) remains in Canadian infrastructure at all times. Billing and account administration use a third-party payment processor subject to its own jurisdictional terms; this is disclosed separately in our privacy policy.
• Lawful access — The DRA architecture described below gives compliance officers the tools to respond to lawful access requests without Canium's involvement.

Lawful Access — Compliance Without Backdoors

Canium provides a Data Recovery Agent (DRA) architecture for organizations that require lawful access capability — legal firms, government agencies, regulated enterprises with compliance obligations.

How it works

• The organization (not Canium) designates a DRA officer.
• A recovery copy of each channel key is sealed using hybrid key encapsulation (X25519 and ML-KEM-768) every time the key changes, not only when the channel is created. Membership changes rotate the key, and each new key is covered as it is created. This envelope is stored server-side as ciphertext — Canium cannot open it.
• Only the DRA, using their designated key, can open the envelope and recover the channel key.
• All DRA operations are audited. Access is gated behind a consent and disclosure workflow.
• DRA authority is org-scoped. Canium has no DRA capability and no access to org key material.

Important: Canium cannot make a recovery copy for you, because Canium never holds a channel key. Messages are covered from the moment you turn on recovery. Keys from before that point can only be covered by a member who still holds them.

What Canium Is Not

• Not a backdoor product. Canium has no ability to decrypt communications. The DRA gives the organization a recovery path — not Canium and not law enforcement by default.
• Not US jurisdiction for communications. No message content or key material leaves Canada. (Billing data is processed by a US-based third-party payment processor — see our privacy policy.)
• Not a policy promise. The privacy guarantee is cryptographic and architectural. It does not depend on Canium's policies, personnel, or good intentions.