Data sovereignty & AWS

Who controls your Nation’s information?

Support for First Nations’ data sovereignty priorities through Amazon Web Services (AWS), with governance, technical requirements and responsibilities defined around your Nation.

START WITH WHY

Start with the information and authority that matter.

Leadership needs to understand who can access information, where it goes and how it can be recovered or moved.

What is at stake?

Unclear permissions, service arrangements and exit terms can reduce control and make continuity harder.

How we help

We coordinate a governance and cloud-options assessment with the Nation and qualified technical specialists.

What your team receives

An options brief covering governance, access, location, costs, responsibilities and a proposed implementation scope.

NATION CONTROL OVER INFORMATION

Start with your Nation’s requirements.

Decide what information matters, how it may be used and who is accountable for protecting it.

We work alongside your leadership, information stewards and existing IT team to define the requirement and coordinate qualified technical specialists. Examples for discussion may include administration, economic-development, housing or land records.

GOVERNANCE & CLOUD SUPPORT

Three parts of a workable plan.

Cloud technology can support the Nation’s objectives when governance, system choices and ongoing responsibilities are considered together.

01 / GOVERNANCE

Ownership and permissions

Clarify information categories, permitted uses, administrator authority, sharing permissions, retention and accountability.

02 / PROTECTION

Location and access

Assess hosting options, service-specific data flows, encryption and key control, permissions, backups, recovery and access logging with specialists.

03 / OPERATIONS

Support and continuity

Define implementation, testing, monitoring, training, incident responsibilities, recurring costs and provider exit arrangements.

AWS HOSTING OPTIONS

Canadian location.
Clear responsibilities.

AWS offers Canada (Central), near Montréal, and Canada West (Calgary) Regions. Service availability and the required design must be assessed for each workload.

AWS Canada data privacy guidance ↗

Review the complete information path

The assessment considers primary storage, processing, backups, logs and connected services against the Nation’s location requirements.

Define operational responsibility

AWS manages the underlying cloud infrastructure. Customers retain responsibilities that depend on the services selected, including their data and permissions. The delivery plan assigns the Nation’s and its providers’ operational duties.

AWS shared responsibility model ↗

Canadian hosting alone does not establish First Nations data sovereignty. Governance, contractual requirements and technical controls need to work together.

FIRST NATIONS INFORMATION GOVERNANCE

Governance defined by the Nation.

The First Nations principles of OCAP® address ownership, control, access and possession of First Nations information. Each Nation’s own requirements guide the assessment and any proposed solution.

We identify the questions for leadership, information stewards, qualified counsel and technical specialists to resolve. A cloud service or hosting location does not automatically establish alignment with those requirements.

Learn about OCAP® from FNIGC ↗
A DEFINED FIRST ASSIGNMENT

A data sovereignty assessment.

A practical options brief before an implementation commitment.

Start with one Nation lead, an overview of current systems and a discussion of priority information and requirements. Agree confidentiality and safe access before reviewing sensitive records.

Discuss a data sovereignty assessment
FROM ASSESSMENT TO APPROVED WORK

Define the next step before committing.

Assessment and advisory

A fixed assignment fee or retainer covers the agreed information review, requirements and options brief. Scope, deliverables, access and timing are confirmed in writing.

Technical delivery and support

Implementation, migration, AWS consumption, training and ongoing support are separately scoped and priced. Confirm provider capability, account administration, acceptance testing and exit arrangements before work starts.

Steve and Royce coordinate the agreed assignment. Qualified technical specialists retain their own design, implementation and support responsibilities.

Have a proposal you want reviewed?

Tell us what you want to achieve, why it matters and what is standing in the way. Start with a brief, non-confidential overview.

Discuss your priorities