| Hosted AI service | The vendor operates the service. Confirm subprocessors, training use, support access, regional processing, authentication, permissions, and contractual controls. | Retention, deletion, logs, export rights, and output ownership depend on the service plan and contract; verify them instead of assuming. | Fastest path and lowest infrastructure burden, but less control over provider changes, boundaries, and exit. Costs usually follow seats or usage. | Low- to moderate-risk work where a reviewed vendor contract and bounded data policy are sufficient. |
| Canadian-hosted service | Primary hosting is represented as Canadian, but identity, support, telemetry, backups, model APIs, and subprocessors may still cross borders. | Require a data-flow map and contract evidence for every processor; Canadian hosting alone does not settle privacy, ownership, or access. | Can support residency requirements with SaaS convenience, but options may be narrower or cost more and still require cross-border analysis. | Workflows with a documented Canadian-residency need and a vendor that can prove the full processing chain. |
| Private cloud | The organization controls a dedicated cloud account or isolated environment, identities, networks, keys, data stores, logs, and approved model endpoints. | The organization can set retention, deletion, backup, audit, and export policies, subject to the cloud and model providers that remain in the chain. | More control and integration flexibility, with higher architecture, security, monitoring, reliability, and support responsibility. | Sensitive or integrated workflows where control and observability justify an operated cloud environment. |
| On-premise or edge | Models and data run on organization-controlled hardware or an edge environment; remote administration, updates, supply chain, and support access still need rules. | Maximum direct control over local storage and logs, but the organization owns deletion, backup, model provenance, patching, and lifecycle evidence. | Highest operational burden and capacity constraint. Hardware, specialist skills, updates, resilience, evaluation, and model limitations must be funded. | Workflows with a demonstrated isolation, latency, connectivity, or sovereignty requirement that outweighs operating complexity. |