Can you tell me whether the data contained in your business systems is compliant with the US Cloud Act, Canada’s law Personal Information Protection and Electronic Documents Act, or the European Union GDPR?

I expect that most people would claim complete ignorance of the rules, let alone have any idea whether they are in compliance or not. 

There is no way you are going to check whether a cloud hosted software application is compliant if you don’t even know to ask the question.

The problem is that when you sign up for a particular service online, do you have any idea where that data is hosted? Where is the data centre that is processing your request? What other applications might be integrated with this application, and where are they hosted? 

Let me give you a simple example. If you are using Spotify for your podcast, is the podcast hosted in Sweden where the company is headquartered or in the US where you live? If you are using an AI tool like Mistral, which privacy and data sovereignty laws must you comply with? If you are using Deepseek for an AI search, is the data being sent to China? 

-----------

**Real Estate Espresso Podcast:**
 Spotify: [The Real Estate Espresso Podcast](https://open.spotify.com/show/3GvtwRmTq4r3es8cbw8jW0?si=c75ea506a6694ef1)  
 iTunes: [The Real Estate Espresso Podcast](https://podcasts.apple.com/ca/podcast/the-real-estate-espresso-podcast/id1340482613)  
 Website: [www.victorjm.com](http://www.victorjm.com)  
 LinkedIn: [Victor Menasce](http://www.linkedin.com/in/vmenasce)  
 YouTube: [The Real Estate Espresso Podcast](http://www.youtube.com/@victorjmenasce6734)  
 Facebook: [www.facebook.com/realestateespresso](http://www.facebook.com/realestateespresso)  
 Email: [podcast@victorjm.com](mailto:podcast@victorjm.com)  
**Y Street Capital:**
 Website: [www.ystreetcapital.com](http://www.ystreetcapital.com)  
 Facebook: [www.facebook.com/YStreetCapital](https://www.facebook.com/YStreetCapital)  
 Instagram: [@ystreetcapital](http://www.instagram.com/ystreetcapital)