Three tests should determine which software qualifies as Canadian: auditability, data residency and Canadian-controlled IP.