Phase pilote : CAIM est en construction. Les fiches sont provisoires, basées sur des sources publiques, et n’ont pas encore été révisées par des pairs. Commentaires bienvenus.
Actif Grave Confiance: high

Aucune organisation canadienne n'a entraîné un modèle d'IA de pointe. Le gouvernement fédéral dépend des plateformes américaines. La chaîne d'approvisionnement en calcul est entièrement étrangère. Le CLOUD Act américain crée un conflit juridictionnel. L'investissement de 2,4 G$ du Canada se concentre sur la recherche, pas sur l'infrastructure souveraine.

Identifié: 1 janvier 2024 Dernière évaluation: 10 mars 2026

Canada's public and private sectors are becoming deeply dependent on AI systems developed, operated, and controlled by a small number of US technology companies — primarily OpenAI (Microsoft), Google, Anthropic, and Meta — without commensurate domestic capacity or governance mechanisms to manage the risks of this dependency.

The scale asymmetry is stark. No Canadian organization has trained a frontier foundation model. Canada's largest AI company, Cohere (Toronto), is valued at approximately US$7 billion — less than 1% of OpenAI's $730 billion valuation. Canada controls less than 1% of global AI compute capacity. The Pan-Canadian AI Strategy, including the $2.4 billion commitment in Budget 2024 and an additional $925.6 million in Budget 2025, focuses primarily on research talent, commercialization, and compute infrastructure. These are important investments, but France alone announced EUR 109 billion in private AI infrastructure investment pledges at the February 2025 AI Action Summit — Canada's total sovereign compute investment is a fraction of what peer nations are committing.

The Government of Canada's own white paper on data sovereignty identified the US Foreign Intelligence Surveillance Act (FISA) as the "primary risk to data sovereignty," stating: "As long as a cloud service provider that operates in Canada is subject to the laws of a foreign country, Canada will not have full sovereignty over its data." The US CLOUD Act (2018) allows US law enforcement to compel disclosure of data held by US companies regardless of where it is stored. Canada and the US have been negotiating a bilateral CLOUD Act agreement since March 2022 — over three years with no agreement reached. CUSMA Article 19.12 prohibits data localization requirements, constraining Canada's ability to mandate that sensitive data stay in-country, and the US is pressuring Canada to maintain these provisions in the July 2026 review.

The AI compute supply chain is entirely foreign-controlled. NVIDIA designs the GPUs that power virtually all AI training and inference; TSMC in Taiwan fabricates them. Canada has zero domestic semiconductor fabrication capacity for AI-grade chips. A Foreign Policy analysis argued that "The Myth of AI Sovereignty" is exposed by the fact that every sovereign AI strategy depends on TSMC chips, creating an ultimate chokepoint.

Even Canada's flagship sovereign AI investment has sovereignty concerns. The $240 million federal investment in Cohere resulted in a data centre built and operated by CoreWeave — a US company subject to US jurisdiction. The Professional Institute of the Public Service of Canada characterized the arrangement as "privatization with a Canadian flag," noting that taxpayers fund Cohere's development, then pay again when Bell resells the AI services back to government. Meanwhile, OpenAI is actively seeking to build Stargate-like data centre capacity in Canada, and AI Minister Evan Solomon has expressed openness to "hybrid models" including US companies — creating a sovereignty paradox where the solution to US dependency may itself deepen US dependency.

The Munk School's "Sovereign by Design" assessment — the first systematic analysis of Canada's position across the AI technology stack — identified cloud infrastructure and compute hardware as two critical chokepoints and recommended a defensive CUSMA strategy ahead of the July 2026 review.

The strategic risk extends beyond data. If a geopolitical crisis disrupted Canada's access to US AI services, the resulting disruption would affect government operations, healthcare systems, financial services, and commercial operations simultaneously. Canada has no contingency plan for AI service disruption because the dependency has developed faster than strategic planning has adapted.

Préjudices

Les données canadiennes traitées sur l'infrastructure d'IA contrôlée par les É.-U. sont soumises à la juridiction américaine (CLOUD Act), minant la législation canadienne sur la vie privée et exposant potentiellement des données sensibles gouvernementales, de santé et personnelles à des processus juridiques étrangers sans surveillance judiciaire canadienne.

Vie privée et donnéesImportantPopulation

Aucune organisation canadienne n'a entraîné de modèle de fondation de pointe. La dépendance envers un petit nombre d'entreprises américaines crée des risques de point de défaillance unique pour les institutions canadiennes et limite la capacité du Canada à définir les conditions des systèmes d'IA utilisés dans les services publics canadiens.

Autonomie compromiseGravePopulation

Preuves

9 rapports

  1. Officiel — Government of Canada (1 janv. 2020)

    FISA identified as 'primary risk to data sovereignty'; Canada cannot have full sovereignty over data on US-controlled infrastructure

  2. Académique — Citizen Lab (1 févr. 2025)

    Bilateral CLOUD Act negotiations ongoing since March 2022 with no agreement

  3. Académique — Open Canada (1 juin 2025)

    Canada controls less than 1% of global AI compute capacity

  4. Autre — PIPSC (1 juin 2025)

    Cohere investment operated by CoreWeave (US); Bell resells AI to government

  5. Académique — Munk School / AI Competitiveness Project (1 janv. 2026)

    Cloud infrastructure and compute hardware are two critical chokepoints; recommends defensive CUSMA strategy

  6. Officiel — Government of Canada (16 avr. 2024)

    $2.4B for AI including compute; Budget 2025 added $925.6M for sovereign infrastructure

  7. Média — The Walrus (1 juin 2025)

    Cohere generates 90% of revenue outside Canada; valued at ~$7B vs OpenAI at $730B

  8. Média — CBC News (1 janv. 2026)

    Solomon open to 'hybrid models' with US companies; OpenAI seeking Stargate-like Canadian capacity

  9. Média — Foreign Policy (9 mars 2026)

    Every sovereign AI strategy depends on TSMC chips — ultimate chokepoint

Détails de la fiche

Recommandations de politiqueévalué

Develop a sovereign AI strategy that addresses compute infrastructure, model development capacity, and supply chain resilience

International comparators (France, EU, Australia)

Assess and publish the federal government's AI dependency posture, including identification of critical single points of failure

TBS / ISED

Establish data residency requirements for AI processing of sensitive government, health, and education data

Provincial privacy commissioners

Évaluation éditoriale évalué

Le Canada intègre des systèmes d'IA développés et contrôlés par les États-Unis dans son gouvernement, sa santé, ses finances et ses infrastructures essentielles sans alternative souveraine. Cela crée un point unique de défaillance. Le CLOUD Act américain mine la souveraineté des données. Contrairement à la France et l'UE, le Canada n'a pas de stratégie explicite d'IA souveraine.

Entités impliquées

Fiches connexes

Taxonomieévalué

Domaine
Infrastructures essentiellesDéfense et sécuritéServices publics
Type de préjudice
Interruption de serviceVie privée et données
Voie de contribution de l'IA
Origine de la chaîne d'approvisionnementContexte de déploiement
Phase du cycle de vie
ApprovisionnementDéploiement

Historique des modifications

Historique des modifications
VersionDateModification
v110 mars 2026Initial publication

Version 1