Cloud & As-a-Service · Sovereign Enclaves
Segregated, Canadian-resident environments for Protected B, Controlled Goods and other data that must never leave the country, with secure desktops built in.
A sovereign enclave is an isolated environment hosted in Canada where sensitive data, backups and administration stay in-country. Users reach it through secure Citrix sessions, so the data never lands on their devices. It's designed for Government of Canada Protected B workloads, Controlled Goods Program data and sovereign AI.
Enclaves are hosted on infrastructure independently audited to SOC 2 Type II and ISO 27001, 27017 and 27018, with a Canadian contracting entity and Canadian-controlled infrastructure. Altanora is the only provider offering a Citrix Protected B cloud in Canada.
Protected B suitability depends on deployment on GC-authorized infrastructure.
Everything needed to keep sensitive work inside the boundary.
Data, backups, DR copies and logs stay in Canada.
Citrix virtual desktops inside the enclave, including GPU options.
MFA, role-based access and identity segmentation.
Full logging with SIEM integration for audits and investigations.
Support personnel with Government of Canada Reliability Status.
Private AI workloads with prompts and data kept in Canada.
Two enclave services built on the same secure platform.
| Sovereign Enclaves | CMMC and CPCSC Enclaves | |
|---|---|---|
| Main driver | Canadian data residency and classification | Defence supply-chain compliance |
| Typical data | Protected B, Controlled Goods, sensitive citizen data | CUI, FCI and specified information |
| Typical buyers | Government, healthcare, public sector suppliers | Defence and aerospace suppliers |
| Frameworks | Protected B, CGP, PHIPA | CMMC Level 2, CPCSC Level 2, NIST SP 800-171 |
Need defence compliance? See CMMC and CPCSC Enclaves.
Why organizations choose Altanora for sovereign workloads.
Canadian public sector
Protected B
Citrix delivered on sovereign Canadian infrastructure, only through Altanora.
Altanora
Quebec construction contractor
AWS → Canada
Moved off a U.S. hyperscaler to Canadian-hosted AltaSphere infrastructure.
Altanora client engagement
ZDFin, German tax administration
€3.2M
saved over three years with centrally managed Citrix and UniconOS thin clients.
From Our Clients
“With the Citrix licensing deadline approaching, this was a high stress, high risk transition. Altanora turned what could have been a major disruption into a complete non-event.”Steve Vinnitsky, President & CEO, Netintegrity
Netintegrity moved to a new Citrix subscription and Citrix Cloud before a hard deadline, with zero user disruption, and now relies on Altanora for ongoing support.
2026 Citrix Evangelist Partner of the Year and a Citrix Platinum Partner since 2006, with 70+ certified engineers across North America.
A Canadian contracting entity and infrastructure reduce foreign legal exposure.
The only Citrix Protected B cloud in Canada, through Altanora.
Enclave, desktops, identity, backup and DR from one partner.
An isolated, Canadian-hosted environment where sensitive data, backups and administration stay in Canada, accessed through secure sessions.
Yes, and it's only available through Altanora. Citrix Cloud itself isn't assessed for Protected B and has no Canadian region.
No. Production data, backups, DR copies and logs are kept in Canadian data centres.
Enclaves are hosted on infrastructure independently audited to SOC 2 Type II and ISO 27001, 27017 and 27018. Protected B suitability depends on deployment on Government of Canada-authorized infrastructure.
Yes. Private AI workloads can run inside the enclave, with data, prompts and outputs kept in Canada.
Plan a Canadian-resident enclave for your regulated workloads.
Plan My Sovereign Enclave