Canadian Procurement Checklist for AI Vendors

Confirm controller vs processor roles, subprocessors, and retention defaults.

Request Security & Compliance documentation and executed DPA where required.

Workspace data residency in Canada (Central) should be documented for your file.