Where your data lives
This page reports what is actually configured in this environment, not a marketing claim. Values are read from the running application's configuration.
Documents, the database and Copilot are configured in Canada
Document storage, AI generation and embeddings all run in Canada. See the component breakdown and encryption details below for which keys Google manages and which TrueNorth Data manages. Email is sent through Resend, a US company.
Application
- Service
- Web service · Cloud Run, dedicated service account
- Region
- northamerica-northeast1 (Montréal)
- Encryption
- In transit: TLS, with an HSTS header
Document storage
- Provider
- Google Cloud Storage
- Integrity
- CRC32C validated · SHA-256 checksums
- Region
- northamerica-northeast1 (Montréal)
- Encryption
- At rest (storage): GCS server-side encryption + a key managed by TrueNorth Data in Cloud KMS
- Key managed by TrueNorth Data
- Enabled
- Status
- Active
Database
- Provider
- Supabase (AWS, Montréal), third-party managed
- Region
- Montréal, Canada
- Encryption
- At rest (database): AES-256 encryption at rest
- Status
- Active
Copilot (AI)
- Provider
- Google Cloud Vertex AI
- Region
- northamerica-northeast1 (Montreal, Canada)
- Data residency
- Canada
- Compliance level
- Protected B: not yet assessed
- Generative models
- gemini-3.5-flash
- Embedding models
- text-embedding-004
- Status
- Active
Audit trail
- Integrity
- SHA-256 hash chain, tamper-evident, per organization
This page is generated server-side from the running application's configuration. Generated at 2026-10-19T18:10:50.685Z