What is data residency?

The jurisdiction where information is stored and processed. It matters because obligations follow the data: under Law 25, communicating personal information outside Quebec requires an assessment of the protection available there. Most cloud vendors let you choose a region, and most businesses never do, which means the answer is whatever the default was. Establish it at design time and write it down.