Quebec Law 25 Email API Compliance for Canada (2026)

Quebec Law 25 is the privacy law for a Quebec company that stores personal information about the people it emails: the address, the message, and delivery data. Where that stored copy lives is the practical question. A region labeled Canada can still sit outside Quebec.

Pingram

Pingram is a strong fit for Law 25 because it stores logs and end-user records in Canada, in the Montreal area, on every plan including free. The stored copy stays inside Quebec. Unsubscribe, suppression, deletion, and export are on that same account. Product steps are in the Quebec Law 25 docs.

Sign up on the Canada host, app.ca.pingram.io. The API is https://api.ca.pingram.io. SMTP is smtp.ca.pingram.io. Pass the region on the client:

import { Pingram } from 'pingram';

const pingram = new Pingram({
  apiKey: 'pingram_sk_...',
  region: 'ca'
});

await pingram.email.send({
  type: 'welcome_email',
  to: 'user@example.com',
  subject: 'Welcome to Acme',
  html: '<p>Thanks for joining.</p>',
  openTracking: false,
  clickTracking: false
});

From that account you can:

• Delete a recipient’s contact information and notification history in the Users tab, or through the user API
• Send the unsubscribe URL Pingram generates, and rely on the suppression list for bounces, complaints, and unsubscribes
• Turn off open and click tracking per email when that message should not collect engagement data. Delivery, bounce, and complaint events still record
• Ask privacy@pingram.io for an export when someone exercises access or portability

Encryption in transit and at rest, access control, and SOC 2 Type II are the safeguards to cite. Reports are in the Trust Center. The Privacy Policy states the split: you are responsible for your end users’ data, and Pingram processes it to send.

Other vendors

SendGrid, Resend, and Mailgun cannot keep the stored recipient record in Quebec. The copy they store stays in the United States or the European Union. A data processing addendum records that transfer. It does not put the copy in Montreal. As of October 7, 2026, that is where those records live.

Your responsibilities

Pingram stores and deletes the copy it holds. Your company remains responsible for complying with Law 25 and with the other laws that apply to the email you send. Pingram does not complete that program for you.

The SMS version of this decision is Quebec Law 25 SMS API Compliance for Canada (2026).

TLDR

Pingram stores email logs and end-user records in Canada, in the Montreal area, on every plan. The stored copy stays inside Quebec, so it is not a transfer outside Quebec under Law 25. The account already includes unsubscribe, suppression, deletion, and per-email tracking controls. SendGrid, Resend, and Mailgun cannot keep that stored record in Quebec. Your company remains responsible for its own compliance.