ITIF：2026年从主权到控制：对加拿大云政策的清醒看法报告（英文版）

In cloud systems, control matters more than ownership. What is important is who can access systems, under what conditions, and with what constraints.  Server location is not sovereignty. Domestic hosting does not prevent foreign legal exposure if providers can still access the data.  The real case for stricter cloud requirements is narrow: defence, intelligence, and a small set of highly sensitive government systems.  Security and industrial policy are being conflated. Systems designed for