1Password is a Canadian company — founded in Toronto in 2005, incorporated in Ontario, headquartered at 4711 Yonge St — making it one of the few enterprise cybersecurity platforms where Canadian public sector buyers can cite sovereign ownership as a procurement criterion. As a Canadian firm, 1Password is not subject to the US CLOUD Act; accessing vault data requires a Canadian court order, and even then the company’s zero-knowledge architecture means it cannot decrypt customer vaults. That sovereignty story has new teeth: Prime Minister Carney’s April 2026 Spring Economic Update activated the $5M Buy Canadian threshold, signalling that procurers should demonstrate Canadian-first sourcing wherever defensible. 1Password crossed $400M USD ARR in November 2025 — the scale signal that reassures procurement risk panels — and in April 2025 launched its Extended Access Management (XAM) platform, which goes beyond password vaults to secure every sign-in to every app from every device, including unmanaged BYOD. DCI holds the Ontario IT Security VOR qualification in Category 18 (Password Management Tools), giving Ontario ministries a direct, low-friction procurement path. For federal buyers, DCI’s SLSA vehicle provides the same access across 70+ federal departments.
