Canada is beginning to turn digital sovereignty from a policy discussion into infrastructure, open technology and domestic capability. Open source needs to be part of that foundation.

For years, digital sovereignty has often been discussed as an abstract policy objective. Who controls our data? Where is it stored? Who owns the technology on which governments, businesses and critical services depend?

In 2026, that conversation is becoming much more concrete.

Over the past several months—and particularly in September—the Government of Canada has announced initiatives involving sovereign cloud infrastructure, Canadian computing capacity, open-source artificial intelligence, digital public goods and international cooperation intended to reduce strategic technology dependencies.

These developments are encouraging. But they also raise an important question:

What does genuine digital sovereignty actually require?

At the Linux Association of Canada, we believe the answer goes considerably further than simply ensuring that a server is physically located in Canada.

Open Source Is Entering Canada's Sovereignty Conversation

One of the most significant recent developments came at ALL IN 2026 in Montréal.

Mila, Mozilla and Hypertec announced plans to establish a Canadian-led open-source AI consortium. According to the Government of Canada, the initiative is intended to make advanced AI tools more accessible and affordable while providing organizations with greater choice and control over their technology and data. Canada

That language matters.

Choice. Control. Accessibility.

These are principles that the open-source community has advocated for decades.

Canada's National Artificial Intelligence Strategy goes even further. It explicitly identifies open-source AI as a means of addressing risks associated with dependence on a small number of proprietary systems, including vendor lock-in and limited transparency. The strategy states that Canada intends to support open-source AI and work toward an inventory and shared library of transparent, adaptable and secure tools. ISED Canada

This is no longer simply an argument being made by open-source advocates.

Open source is increasingly appearing within Canada's national technology strategy.

Sovereignty Requires Infrastructure

Software, however, is only one layer.

Canada currently relies significantly on infrastructure and services located outside the country for AI compute, cloud services and data storage. The federal government has explicitly acknowledged that increasing domestic capacity can provide greater resilience and choice. Canada

Shared Services Canada's 2026–27 plan provides an especially interesting indication of where this may be heading.

SSC describes digital sovereignty as the ability to exercise autonomy over digital infrastructure, data, intellectual property and critical technologies. Its plans include dedicated infrastructure for a sovereign private cloud environment within Canadian jurisdiction, expanded Canadian cloud capacity and sovereign AI infrastructure capable of handling sensitive government workloads. Canada

There are significant private-sector infrastructure developments as well.

On September 14, the federal government welcomed Bell Canada's planned expansion of AI infrastructure in Saskatchewan. The proposed project could eventually provide up to 900 megawatts of additional capacity and form part of a 1.2-gigawatt Canadian AI infrastructure hub. Canada

At the same time, Canada has introduced Responsible Data Centre Development Principles covering local economic benefits, electricity costs, water and environmental impacts, transparency and strategic value. As of September 21, 42 organizations had signed onto those principles. Canada

The physical layer of Canada's digital economy is clearly receiving attention.

But infrastructure alone does not create sovereignty.

A Server in Canada Is Not Enough

Data residency and digital sovereignty are related, but they are not the same thing.

We can locate servers in Canada while remaining entirely dependent upon technologies controlled elsewhere.

If Canadian organizations cannot inspect the systems they depend upon, cannot modify them, cannot independently maintain them, cannot migrate away from a vendor without enormous disruption, and lack the domestic skills required to operate alternatives, then our technological independence remains limited.

True digital sovereignty requires capability.

That means infrastructure, certainly.

But it also means software, standards, skills, knowledge, interoperability and the ability to choose another path when circumstances change.

This is where open source becomes particularly important.

Open-source technology gives organizations the ability to inspect code, operate systems independently, adapt technology to their requirements and build expertise that is not tied exclusively to one vendor.

It does not mean that every Canadian system must use open-source software.

It means that open-source alternatives should be a serious part of Canada's technology strategy wherever they provide a practical, secure and sustainable option.

Canada Is Also Embracing Digital Public Goods

Another development received considerably less public attention.

Earlier this year, the Government of Canada, through the Canadian Digital Service, joined the Digital Public Goods Alliance.

Digital public goods include open-source software, open data, open AI models, open standards and open content. Canadian Digital Service products including GC Notify, GC Forms and the GC Design System are themselves open source and are intended to be reusable across jurisdictions. Canadian Digital Service

This demonstrates something important.

Governments do not always need to purchase another proprietary solution to solve the same problem repeatedly.

Technology can be developed once, shared, improved collaboratively and reused.

That principle has powered open-source development for decades.

Applied thoughtfully within government, it can reduce duplication while also improving transparency, interoperability and institutional knowledge.

Sovereignty Does Not Mean Isolation

Digital sovereignty should also not be confused with technological isolation.

Canada cannot—and should not—attempt to build every component of the modern technology stack alone.

The objective should instead be the ability to choose our dependencies rather than being trapped by them.

Canada and Germany's Sovereign Technology Alliance illustrates this approach. Launched earlier this year, the initiative is intended to strengthen cooperation between trusted partners in areas including AI models, digital infrastructure, research and technology standards. The first meeting of its co-chairs took place in Montréal on September 17. Canada

Open source fits naturally within such cooperation because open technologies can be examined, shared, adapted and improved across organizations and borders without placing the entire ecosystem under the control of a single supplier.

The Missing Piece Is People

There is another part of digital sovereignty that receives far less attention than data centres, cloud platforms or AI models.

Who will operate all of this infrastructure?

Someone must deploy it.

Someone must secure it.

Someone must maintain the Linux systems underneath it, manage containers and orchestration platforms, automate infrastructure, monitor networks, respond to incidents and keep critical systems running.

Canada can invest billions of dollars in sovereign infrastructure, but without a Canadian workforce capable of operating and developing that infrastructure, another dependency simply moves somewhere else in the technology stack.

This is why Linux and open-source skills matter beyond the open-source community itself.

They are increasingly infrastructure skills.

And building those skills in Canada should be considered part of building Canada's technological capacity.

From Policy to Capability

The creation of Digital Transformation Canada earlier this month provides another indication of the direction of federal policy. Its mandate includes strengthening Canada's digital sovereignty and security while using federal procurement more strategically to help Canadian technology companies develop and scale. Canada PM

Taken individually, none of these initiatives creates digital sovereignty.

Together, however, they indicate an important shift.

Canada is beginning to discuss sovereignty not simply in terms of where information is stored, but in terms of compute, infrastructure, software, intellectual property, procurement, skills and technological choice.

That is a much more meaningful conversation.

The next challenge is ensuring that these pieces develop together.

Canada needs domestic infrastructure.

Canada needs Canadian technology companies.

Canada needs secure and resilient government systems.

Canada needs open standards and interoperability.

Canada needs viable open-source alternatives.

And Canada needs people with the skills to build and operate them.

Canada's Opportunity

Open source will not solve every technological challenge Canada faces, nor should digital sovereignty become an excuse to reject valuable technologies simply because they originate elsewhere.

The objective should be resilience and choice.

Canada should be able to adopt the best technologies available while maintaining the knowledge, infrastructure and alternatives necessary to avoid becoming permanently dependent upon any single company, platform or foreign jurisdiction.

That is what meaningful digital sovereignty can look like.

For the Linux and open-source community, this is an important moment.

Ideas that our community has discussed for decades—open standards, interoperability, transparent technology, portability, local expertise and freedom from vendor lock-in—are increasingly becoming questions of national economic and technological resilience.

The conversation is changing.

Digital sovereignty is beginning to move from policy to infrastructure. Our next task is to ensure that Canada also builds the open technology and human capability needed to sustain it.