> 1) We need to comply with Canadian privacy laws, so need Canadian VPS - and those are way more expensive than in US.
That might not be an issue: http://www.ic.gc.ca/eic/site/ecic-ceac.nsf/eng/gv00508.html
> 2) To be PCI compliant
AWS is PCI compliant: http://aws.amazon.com/security/pci-dss-level-1-compliance-fa... and Rackspace might not be charging extra anymore.