I'll speak to that.
The Ontario government has not mandated that the data be in Canada. Rather, it looks to a due diligence process around the quality of the service providers and holds them to account to ensure adequate control and security for the protection of the data.