Is Tailscale a Canadian company?

Yes, Tailscale is a Canadian company

Tailscale Inc. is a Canadian company. It is headquartered in Toronto, Ontario, and it was founded in 2019 by four former Google engineers. As of September 2026 it is privately held. It is not an Israeli company.

That answers the question people type. The question underneath it is what a Canadian head office means for the metadata Tailscale holds about your network, and the honest answer is: less than you might hope. The company that owns the product, the entity you contract with, the servers that run the control plane, and the countries that process your data are four different answers.

Who founded Tailscale, and who funds it

Two independent accounts, the company's Wikipedia entry and BetaKit's coverage of the 2022 Series B, name the same four founders: Avery Pennarun (CEO), David Crawshaw (CTO), David Carney (COO), and Brad Fitzpatrick. All four came from Google. The University of Waterloo's alumni write-up of the same round counts three, Pennarun, Carney and Crawshaw, and does not list Fitzpatrick, so treat the fourth name as the common press account rather than a company statement. Tailscale's own company page, read on September 13, 2026, names Pennarun as CEO and does not list founders at all.

The same company page lists five investors: Accel, CRV, Insight Partners, Heavybit, and Uncork Capital. In May 2022 the company raised a Series B of about 100 million US dollars, led by CRV and Insight Partners, at a reported valuation of one billion US dollars. Earlier backers named in BetaKit's report were Inovia Capital and Panache Ventures, both Canadian funds.

Which Tailscale entity you actually contract with

This is the fact the head office address does not tell you. Tailscale's Terms of Service, last updated August 25, 2026, define "Tailscale" in Schedule A by the date your account was created. An account created before September 3, 2024 has a contract with Tailscale Inc., "a Canadian business corporation" with a registered address at 100 King Street West, Toronto. An account created on or after that date has a contract with Tailscale US Inc., "a Delaware corporation" with a San Francisco address.

The governing law follows the same move away from Canada. For business customers the terms are governed by the laws of the State of New York, with exclusive venue in the courts of New York County. Only residents of Quebec using the service personally get Quebec law and Canadian courts. So a customer who signed up in 2026 is dealing with a Canadian parent through a US subsidiary, under US law. That is a normal structure for a company selling mostly to US businesses, but it is not what "Canadian company" suggests on its own.

What the coordination server holds

Tailscale's servers never carry your packets. Each device generates a WireGuard key pair, and the private key never leaves the device. The coordination server holds the public half of every key, each device's name, operating system, public IP address and advertised routes, the identity of the user who logged it in (taken from your identity provider, since Tailscale keeps no passwords), and the tailnet policy file that says which device may talk to which. Devices download that list and then connect to each other directly, or through a relay when network address translation (NAT) blocks a direct path. Either way the traffic is encrypted end to end with keys the coordination server has never seen.

So what a government or a court could get from Tailscale is a map of your network: who owns which device, where those devices have been, which of them may talk to each other, and when they last checked in. That is real information, and jurisdiction is exactly what decides who can demand it. For how the mesh is built, read what Tailscale is and how the coordination server fits in. For what the company can and cannot do with the keys it holds, read whether Tailscale is secure, and what it would take to abuse the control plane.

Where the control plane is hosted

Tailscale's security page, read on September 13, 2026, says the control plane "runs on Linux servers in Amazon Web Service (AWS), in AWS Virtual Private Clouds (VPCs)". It names no AWS region and no country.

The privacy policy, effective August 25, 2026, is broader. It says your information "is maintained and processed by us and our third-party service providers in Canada, Germany, the United States and the United Kingdom", and that it may also be stored "in other jurisdictions". It does not say which of those countries holds the coordination server's database. The compliance page lists a SOC 2 Type II report and a data processing addendum for the General Data Protection Regulation (GDPR), plus statements on the EU Digital Services Act and the EU Digital Operational Resilience Act, and it offers no data-residency option. None of Tailscale's own pages, on the day of writing, pins the control plane to Canada.

A Canadian company is not Canadian hosting

Incorporation decides which laws bind the company. Hosting decides which laws bind the disk. Tailscale is a Canadian corporation with a Toronto address, contracts new customers through Delaware, runs its control plane on AWS in an unnamed region, and processes personal data in four named countries. If your requirement is "this data stays in Canada", that requirement is not met by any of those facts, and it cannot be met by an account setting, because the account has no region setting.

Canadian data residency is a property of where the server sits and who operates it. A Canadian VPS gives you that for the workloads you run on it, and the mesh that connects your machines can then be arranged so the metadata stays with you too. If residency is the real question, start with what data residency on a Canadian VPS does and does not guarantee and then decide whether the coordination layer needs the same treatment.

Taking the company out of the trust chain

Two options remove Tailscale from the list of parties you must trust, and they cover different risks.

Tailnet lock keeps Tailscale's hosted control plane but removes its power to add nodes. With it on, a new device's key must be signed by a signing node you control before other devices will accept it, so a compromised or coerced coordination server can distribute keys but cannot inject one. The metadata still lives on AWS; the ability to join your network does not. How tailnet lock works, and what it still cannot protect covers the signing flow and its limits.

Headscale replaces the control plane entirely. It is an open-source reimplementation of the coordination server that the standard Tailscale clients can point at, so the public keys, the device list, the policy file and the user list live on a machine you choose, in a country you choose. That is the only configuration in which "where is my Tailscale data" has a one-word answer. Self-hosting the Tailscale control plane with Headscale walks through it, and a Canadian VPS is a natural home for it.

FAQ

Is Tailscale a Canadian or an American company?

Both, depending on which part you mean. The parent, Tailscale Inc., is a Canadian corporation headquartered in Toronto. Since September 3, 2024 new accounts contract with Tailscale US Inc., a Delaware subsidiary, under New York law. The founders and the head office are Canadian. The customer-facing legal entity for anyone who signed up recently is American.

Is Tailscale an Israeli company?

No. Tailscale Inc. was founded in Toronto in 2019 by former Google engineers, and its investors, as listed on its own company page in September 2026, are Accel, CRV, Insight Partners, Heavybit and Uncork Capital. Nothing in its corporate record connects it to Israel.

Where does Tailscale store my data?

Tailscale's security page says the control plane runs on AWS and names no region. Its privacy policy, effective August 25, 2026, says personal data is processed in Canada, Germany, the United States and the United Kingdom, and possibly in other jurisdictions. Neither page says which country holds the coordination server, and there is no setting to choose one.

Can Tailscale read my traffic?

No. Traffic between your devices is encrypted end to end with WireGuard keys that never leave the devices. The coordination server holds public keys, device metadata, user identities and your access policy. Relayed traffic passes through Tailscale's relays still encrypted, because the relay never holds a private key.

How do I keep Tailscale metadata in Canada?

Run the control plane yourself. Headscale is an open-source coordination server that works with the normal Tailscale clients, so installing it on a Canadian VPS keeps the key list and the policy file on Canadian soil. Tailnet lock is a smaller step: it keeps Tailscale's hosted control plane but removes its ability to add devices to your network without your signature.