PaperVault is a brand of Agilio IT Consulting Inc. This page lists the third parties (subprocessors) we use to process customer content — the documents, case records, and personal information our customers upload to and process through the Service — as required by our Data Processing Agreement (DPA).
Our primary infrastructure — compute, databases, and document storage — is hosted in Toronto, Ontario, Canada. All customer content persisted at rest remains in Canada. Specific functions transmit specific categories of data outside Canada, as identified per subprocessor below and disclosed in Section 9 of our DPA.
Active subprocessors
Engaged in the ordinary operation of the Service.
| Subprocessor | Function | Data processed | Location |
|---|---|---|---|
| DigitalOcean (DigitalOcean Holdings, Inc.) | Cloud infrastructure: compute, managed database, object storage | All customer content and account data | Toronto, Canada (TOR1) |
| Cloudflare (Cloudflare, Inc.) | Content delivery network, web application firewall, bot protection (Turnstile), custom hostnames; TLS termination of data in transit | Network transit data; connection metadata and telemetry | Global edge, including Canadian points of presence |
| Anthropic (Anthropic PBC) | AI models powering AI features: document classification, data extraction, compliance analysis, form validation, and assistant functionality | Document contents (including native PDF/image processing), case records, identity data, screened-subject identifiers | United States |
| Resend (Plus Five Five, Inc.) | Outbound transactional email and inbound email parsing | Email addresses, message content, identity data | United States |
| Sentry (Functional Software, Inc.) | Error tracking and performance monitoring | Operational telemetry; incidental identity data in error context | United States |
A note on AI processing
When you use PaperVault's AI features, document and case content is transmitted to Anthropic in the United States for processing. Customer content is not used to train, fine-tune, or improve any AI models — ours or anyone else's — and we contractually require our AI providers to honour the same restriction. Each AI feature can be disabled independently for customers who do not wish to use it.
Feature-dependent subprocessors
Engaged only where you enable the corresponding feature.
| Subprocessor | Function | Data processed | Location | Engaged when |
|---|---|---|---|---|
| OpenSanctions (OpenSanctions Datenbanken GmbH) | Sanctions, politically-exposed-person, and watchlist screening | Screened-subject names and identifiers | Germany (EU) | Compliance screening is used |
| Voyage AI | Text embeddings for the regulatory knowledge corpus | Knowledge-source text; no customer documents or identity data under current usage | United States | Knowledge/RAG features are used |
| Intuit (Intuit Inc.) | QuickBooks Online accounting integration | Billing identifiers, invoice data, identity data | United States | You connect QuickBooks |
| UK Companies House | UK company registry lookups for know-your-business screening | Screened-subject entity names and identifiers | United Kingdom | KYB screening is used |
| Free Law Project (CourtListener) | US court-record lookups for adverse-media screening | Screened-subject names | United States | Adverse-media screening is used |
Public data sources
When you use compliance-screening features, screened-subject names are also submitted as queries to public registries and data sources. These are not contracted subprocessors — there is no commercial relationship to attach data-protection terms to — but we disclose them for transparency, because a queried name is personal information leaving the platform:
- GLEIF (Global Legal Entity Identifier Foundation, Switzerland) — legal entity identifier lookups
- The GDELT Project (United States) — global news index queried for adverse-media screening
These sources receive only the queried names and identifiers. Their handling of queries is governed by their own published terms.
Payment processing
Payments are processed by Helcim Inc. (Calgary, Canada), which acts as an independent organization — not a subprocessor — for payment card data. Card details are captured directly by Helcim's hosted payment interface and never transit or reside on PaperVault systems. See our Privacy Policy and Helcim's own privacy policy.
What is not listed here
Vendors that never process customer content are not subprocessors and do not appear above. This includes our source-code hosting and CI/CD tooling, which handle code and deployment automation only — our build pipeline has no access to production databases or document storage. Screening providers for which technical integration exists but which are not commercially engaged process nothing and are likewise excluded; if we activate one, the change process below applies first.
Changes to this list
We give at least 30 days' notice before a new subprocessor processes customer content, by updating this page and by email to subscribed customers. Customers may object on reasonable data-protection grounds as set out in Section 6.3 of the DPA.
To receive change notifications, email privacy@agilio.ca with the subject “Subprocessor notifications” from your account email, or use the notification preference in your account settings.
Questions
Contact our Privacy Officer at privacy@agilio.ca, or write to Agilio IT Consulting Inc., 133-290 King Street East, Kitchener, Ontario N2G 2L3, Canada.