Managed Data Privacy Hosting

Managed infrastructure designed for privacy

HDCE designs, operates and protects sovereign environments for your sensitive workloads in its data centres in Quebec, combining security, compliance and resilience.

Your data.
Our expertise.
Guaranteed
sovereignty
Lasting trust
for your business

Why?

A shield with a padlock and a maple leaf in front of servers: encrypted storage, multi-site replication, primary site in Montreal and recovery site in a secondary region.

Compliance: supported frameworks and requirements

ISO 27001Information security
SOC 2Controls and trust
HIPAAHealth data
PCI DSSPayment data
NISTFrameworks and best practices

Our practices are built on these recognized frameworks. Available attestations and their scope are provided on request.

A complete offering for your sensitive environments

Managed, sovereign, structured hosting with built-in best practices for privacy, security and resilience.

01
Managed architecture

Infrastructure designed, deployed and operated by our experts, following security and privacy best practices.
- Custom configuration
- 24/7 monitoring
- Patching and hardening
02
Network segmentation

Environment isolation, flow control and micro-segmentation to limit exposure risks.
- Dedicated private networks
- Firewalls and granular policies
- Secure access (VPN, bastion)
03
High availability

Redundant infrastructure to ensure the continuity of your services and the availability of your data.
- Multi-site redundancy
- Replicated storage
- Defined RTO/RPO objectives
04
Disaster recovery

Regularly tested continuity and recovery plans to keep your operations resilient.
- Dedicated recovery site
- Continuous data replication
- Scheduled tests and drills

Use cases for regulated industries

Infrastructure tailored to your business and regulatory requirements.

Personal information protection

Law 25 compliance and data sovereignty

Where your data is hosted is part of your obligations. In Quebec, Law 25 (An Act to modernize legislative provisions as regards the protection of personal information) governs how businesses collect, use, communicate and entrust personal information. Federally, PIPEDA (in French, LPRPDE) applies to personal information handled in the course of commercial activities.

What Law 25 means

Before communicating personal information outside Quebec, for example to a foreign cloud provider, a business must conduct a privacy impact assessment (PIA). It must consider, among other things, the sensitivity of the information, the purposes for which it will be used, the protection measures in place and the legal framework of the place where it will be communicated.

Entrusting information to a service provider also requires a written agreement that specifies the protection measures.

PIPEDA and foreign laws

PIPEDA makes an organization accountable for the information it entrusts to a third party: it must provide a comparable level of protection, by contract or other means.

A provider subject to foreign laws, such as the US CLOUD Act, can be required to hand over data under its control to the authorities of its country, even if that data is stored in Canada. Entrusting your data to a Canadian host operating in Quebec avoids this exposure.

What HDCE puts in place

Data in Quebec: hosting and replication in our data centres in Quebec, including our Montreal data centre.
Canadian company: HDCE is a Quebec company based in Montreal.
Access control: access restricted to authorized staff, following the principle of least privilege.
Logging: access and activity logs to support your audits and incident management.
Contracts: written agreements on data location and protection measures, to support your own assessment.

Hosting in Quebec simplifies your process without replacing your other obligations (person in charge of the protection of personal information, consent, confidentiality incident management). This content is for information only and does not constitute legal advice.

A greater investment, incomparably greater value

Our managed offering includes every essential element to guarantee the privacy, performance and resilience of your environments.

Standard machine $100 / month

Compute resources
Basic storage
Standard connectivity

Managed Data Privacy Hosting Starting at $250 / month

Redundant, high-availability architecture
Data replication and disaster recovery
Managed compliance and security
Expert guidance

+150%value
included

Why “starting at”? Because your servers and data are replicated four times. This redundancy costs more than a standard machine, but it comes with all the compliance needed to host your infrastructure. See how your environment is protected

Frequently asked questions

Does hosting with HDCE help with Law 25 compliance?

It helps, but it does not replace your own compliance. Your data stays in Quebec, which simplifies the assessment required before communicating information outside Quebec, and our agreements specify data location and protection measures. Your other obligations (person in charge of the protection of personal information, consent, incident management) remain yours. This content is for information only and does not constitute legal advice.

Where is my data hosted?

In our data centres in Quebec: the primary site is in Montreal, and a separate recovery site receives replicated data for disaster recovery. Your data stays in Canada.

How is high availability ensured?

Your servers and data are replicated four times on a redundant architecture spread across several sites, with recovery objectives (RTO and RPO) defined with you. Recovery plans are tested regularly.

Can you migrate our current environment?

Yes. Our experts plan the migration with you: inventory, cutover order, testing and maintenance window, to limit service interruptions. Tell us about your environment to get a plan that fits.

Critical infrastructure deserves a real person.

An HDCE expert will call you back within 15 to 25 minutes. There’s always someone available, because your digital health matters to us.