Ottawa Bets CAD 1.6 Billion on Cohere. Sovereign AI Still Comes Down to Your Contract

Canada has decided that where its AI runs, and who controls the data flowing through it, is a question of national policy. On October 29, 2026, Prime Minister Mark Carney announced that the federal government will make an equity investment of up to CAD 1.6 billion in Cohere, the Toronto-founded company that builds AI systems for businesses and governments. The government described it as a commercial investment, made alongside private investors including NVIDIA, Bell and Schwarz Group, and paid out in stages tied to the company’s commitments.

The announcement landed six weeks after Canada and Germany said they plan to put CAD 150 million and EUR 100 million respectively into LawZero, the Montreal nonprofit founded by Yoshua Bengio to build AI that is “safe by design.” Taken together, the two deals show a government using its balance sheet to shape the market for AI that customers can control.

For privacy and compliance teams, the news matters less as industrial policy than as a signal about procurement. “Sovereign AI” is now a phrase backed by a national government, and vendors of every size will use it in sales decks. This piece sets out what was actually announced, what data sovereignty can and cannot mean for a buyer, and how to test a sovereignty claim before you sign.

What Canada announced

According to the Prime Minister’s announcement, the investment will total up to approximately CAD 1.6 billion. In return, Cohere has committed to:

• create at least 1,000 new high-paying Canadian technical jobs by 2030;
• commit at least CAD 1.7 billion to additional computing infrastructure in Canada by 2030;
• keep its Canadian incorporation and Canadian headquarters;
• invest in Canadian research partnerships and create opportunities for students and recent graduates; and
• keep working with the Canadian AI Safety Institute on the safe development and use of advanced AI.

The government says the money will flow in stages, with regular reporting on progress against those commitments. Carney framed the deal in data-control terms: the bigger and faster Cohere can scale, he said, “the more businesses and governments can control where sensitive data is stored, how it is used, and who can access it.”

Cohere announced the same day that the federal stake is part of a Series E round targeting up to CAD 7 billion at a CAD 35.7 billion valuation. In its release, the company said Schwarz Group companies lead the round, that Bell Ventures, Bullhound Capital and the Government of Canada are new investors, and that Inovia Capital, NVIDIA and Prosperity7 Ventures are returning. Cohere described this as an initial close and called it the largest private financing round ever undertaken by a Canadian technology company. Those are the company’s own figures; the round had not closed at its full target at the time of the announcement.

Two details in the Cohere release are relevant to anyone doing vendor diligence. First, Cohere completed a business combination with Germany’s Aleph Alpha earlier in 2026, and Schwarz Digits said its goal is to anchor the combined company’s capabilities in its STACKIT cloud. Second, Cohere says (its own claim, not independently verified) that it offers deployment across cloud, a “Model Vault,” on-premises and fully air-gapped environments. Both points bear directly on where data goes, and both are things a buyer should confirm in a contract rather than accept from a press release.

LawZero: the safety half of the strategy

The September 16 announcement from Innovation, Science and Economic Development Canada said Canada’s CAD 150 million, drawn from the Strategic Response Fund, will support research and engineering talent and computing capacity for LawZero’s “Scientist AI.” The government describes it as a system built to reason transparently and give evidence-based outputs without goals of its own, in contrast to frontier systems designed to act autonomously. The project is expected to create 360 full-time jobs in Canada and set up dedicated sovereign computing infrastructure with Hypertec and 5C.

Germany’s EUR 100 million is subject to notification by the European Commission and will fund work at LawZero’s new German office. The Canadian release says this will let European AI norms and regulations be built in from the start, and that LawZero’s first work will be tools to assess and oversee existing AI systems. The deal builds on a Canada-Germany Joint Declaration of Intent on AI and a Sovereign Technology Alliance, both announced in February 2026, and on Canada’s national AI strategy, AI for All, launched June 4, 2026. We covered the wider EU and Canada digital cooperation framework separately; the LawZero deal is one of its more concrete outputs.

What “sovereign” can and cannot promise

Sovereignty in AI usually bundles three different things, and they are easy to confuse.

Residency is where data is physically stored and processed. A Canadian data centre gives you residency. It does not, by itself, tell you who can be compelled to hand over the data. Our explainer on data localization versus data residency walks through the difference.

Jurisdictional control is which governments can legally demand access. A provider incorporated in one country may be subject to that country’s orders for data it holds abroad. The U.S. CLOUD Act is the example most buyers know: it lets U.S. authorities require U.S. providers to produce data in their possession, custody or control regardless of where it is stored. Cohere’s commitment to stay Canadian-incorporated and headquartered is relevant here, but each subprocessor and hosting partner in the chain has its own corporate home.

Operational control is whether the customer, rather than the vendor, holds the keys, sees the logs, decides whether prompts and outputs are retained and decides whether its data trains future models. This is the layer that matters most for privacy compliance, and it is the one a government equity stake does nothing to guarantee.

None of this makes sovereignty marketing empty. A model you can run on your own infrastructure, or in an air-gapped environment, removes whole categories of transfer and access risk. But the protection comes from the deployment you choose and the contract you sign, not from the vendor’s nationality.

Canadian law still governs the data, whoever builds the model

A sovereign AI vendor does not change the privacy obligations of the organization deploying it. PIPEDA still holds the organization accountable for personal information it transfers to a third party for processing, and requires it to use contractual or other means to provide a comparable level of protection. Our guide to PIPEDA cross-border transfers covers how that works when a service provider processes data outside Canada. Quebec adds a privacy impact assessment before personal information leaves the province.

Federal reform is also coming. Bill C-36, the proposed Protecting Privacy and Consumer Data Act introduced and given first reading in the House of Commons on June 15, 2026, and as of late October 2026 still at second reading, would add privacy impact assessments, explanations of automated decision-making and much larger penalties if Parliament passes it. Our analysis of Bill C-36 explains what would change. A buyer choosing an AI platform in 2026 should assume those duties will apply during the life of the contract.

Seven questions to put to any “sovereign AI” vendor

Whether the vendor is Cohere or anyone else making the same pitch, these questions separate a real control from a marketing claim.

1. Where exactly will our data be processed? Ask for named regions and facilities for storage, inference, logging, backups and support access, not just “in Canada.”
2. Who are the subprocessors, and where are they incorporated? Cloud hosts, GPU providers, monitoring tools and support contractors each add a jurisdiction.
3. Are prompts, outputs and files retained, and for how long? Get retention periods in writing, including for abuse-monitoring logs.
4. Will our data be used to train or improve any model? Require a contractual no-training commitment if that is what you need, and ask how it is enforced technically.
5. Who holds the encryption keys? Customer-managed keys and on-premises or air-gapped deployment change the answer to “who can be compelled.”
6. What happens if a foreign government demands our data? Ask for the vendor’s policy on government access requests, including notice to customers where lawful.
7. What evidence will you give us? Audit reports, assessment results and a description of how the system uses information support your own privacy impact assessment and records.

We keep a broader guide to AI governance vendors for teams building the program around these purchases.

Where Captain Compliance fits

Captain Compliance does not sell AI models or hosting, so it is not a substitute for any of the vendors above. Its Canada privacy program handles the work around them: tracker and vendor visibility on your websites, English and French consent and notices, access and correction requests, Quebec assessments, incident records and evidence that ties those pieces together. When an AI platform becomes another recipient of personal information, that is where the data map, assessment and notice updates belong.

Frequently asked questions

Is the government giving Cohere a grant?

No. The government describes it as a commercial equity investment of up to about CAD 1.6 billion, made in stages, so Canada will hold a stake in the company.

What has Cohere promised in return?

At least 1,000 new Canadian technical jobs and at least CAD 1.7 billion in additional Canadian computing infrastructure by 2030, keeping its Canadian incorporation and headquarters, research partnerships, and continued work with the Canadian AI Safety Institute.

Is LawZero part of the Cohere deal?

No. It is a separate investment announced September 16, 2026. Canada plans to invest CAD 150 million and Germany EUR 100 million in the Montreal nonprofit, with Germany’s share subject to European Commission notification.

Does using a Canadian AI vendor satisfy PIPEDA’s transfer rules?

Not automatically. The organization remains accountable for personal information it sends to a service provider and must ensure comparable protection through contracts or other means. Where the vendor or its subprocessors process data matters, but so do the contract terms.

Does data residency stop foreign access to data?

Not on its own. Residency covers location. Whether a foreign authority can compel access depends on who controls the data and where that company and its subprocessors are incorporated, which is why key control and deployment model matter.

Should non-Canadian companies care?

Yes, if they sell into Canadian governments or regulated industries, or buy AI services for Canadian operations. Procurement teams in those sectors are likely to ask more pointed sovereignty questions now that the federal government has staked money on the answer.

Ottawa has bought a seat at the table of one of the world’s better-funded AI companies, and it will publish progress reports against jobs and infrastructure targets. What it has not bought, and cannot buy on a customer’s behalf, is control over any particular organization’s data. That still gets negotiated one contract at a time, and the buyers who ask the hard questions will be the ones who actually end up with sovereign AI.