Cloud service providers are required to register in the Controlled Goods Program

The Government of Canada needs products and services in support of Canada’s response to COVID-19.

Learn how to supply a needed product or service

New! CanadaBuys is here! Suppliers register today!

Register now to ensure you transition to doing business with the new Government of Canada procurement service. Click here to get started.

May 14, 2021 – Ottawa – Are you a business that provides cloud services, or a registrant in the Government of Canada’s Controlled Goods Program (CGP) that uses cloud services to store data?

Here is some important information regarding cloud services for controlled goods data:

Cloud service providers:

  • To provide storage for controlled goods data, cloud service providers must be registered in the Controlled Goods Program, regardless of the technique or level of encryption used.

Individuals and organizations registered in the Controlled Goods Program:

  • Cloud servers within Canada: Registrants are responsible for verifying that the service provider holds a valid Controlled Goods Program registration.
  • Cloud servers outside of Canada: Registrants should liaise with Global Affairs Canada for all matters related to export controls.
  • The transfer and/or storage of controlled goods data with cloud service providers that do not hold a valid Controlled Goods Program registration is an offence under Sections 37 and 44 of the Defence Production Act.

For full details on this requirement, please see our Communiqué.

Contact us

If you have any questions regarding this registration requirement, please contact the contact the Controlled Goods Program.

For more information or questions about controlled goods

Learn more about controlled goods, how they are regulated and what this means for you or your organization, on the What are controlled goods page.

Stay informed

Stay informed about tenders, website updates and procurement news by subscribing to the: