Pasqio engages the subprocessors listed below to provide the Pasqio Service. Each is bound by a data processing agreement requiring security and data protection measures aligned with the GDPR and other applicable data protection law. Document and file content is encrypted with per-matter AES-256-GCM keys before it leaves our application, so it reaches these providers only in encrypted form, or not at all.
| Subprocessor | Purpose | Data processed | Location |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting: compute, database, encrypted object storage, edge delivery and WAF. | All Account Data and Content, with document and file content encrypted at rest under keys AWS does not hold. | United States |
| Resend, Inc. | Transactional email — invoices, invitations, notifications, password resets. | Recipient name and email address, and the contents of the message sent. | United States |
| Confido Legal, Inc. | Payment processing, subscription billing, and IOLTA trust accounting. | Payor name, email, billing details, and transaction records. Card and bank credentials are captured by Confido directly and never reach Pasqio’s servers. | United States |
| Functional Software, Inc. (Sentry) | Application error monitoring and performance diagnostics. | Error events with user identifier, request path, and stack trace. Sensitive values are scrubbed before events leave our servers. | United States |
| Google LLC (optional) | Calendar synchronization and single sign-on — only if your firm connects a Google account or turns on Google sign-in. | Calendar events and profile identifiers from the connected account. The calendar refresh token is stored encrypted (AES-256-GCM); access tokens are issued on demand and never stored. | United States |
| Microsoft Corporation (optional) | Calendar synchronization and single sign-on — only if your firm connects a Microsoft account or turns on Microsoft sign-in. | Calendar events and profile identifiers from the connected account. The calendar refresh token is stored encrypted (AES-256-GCM); access tokens are issued on demand and never stored. | United States |
§Changes to this list
We will update this page before a new subprocessor begins processing customer data. Subscribers who wish to receive notice of changes may request it at support@pasqio.com.
End of documentQuestions? support@pasqio.com