Where your data lives
You are bound by professional secrecy. So you have the right to know exactly who touches your data, where, and to do what. Here is the complete list — not a summary.
| Provider | Role | Incorporated in | Hosting | Data handled |
|---|---|---|---|---|
| Supabase | Database, authentication and document storage | United States | Canada — Montreal (ca-central-1) | Matters, contacts, time, invoices, documents, audit log |
| Vercel | Application hosting | United States | Canada — Montreal (yul1) | Processing in transit only; nothing retained |
| Sign-in with a Google account, if you choose that route | United States | United States | Your email address and your name, at the moment you sign in. No matter content. Signing in with a password avoids this provider entirely | |
| Amazon Web Services (SES) | Sending transactional email | United States | Canada — Montreal (ca-central-1) | Email addresses, subjects and links. No matter content |
| Stripe | Billing your Dossio subscription | United States | United States | Billing and payment details. No matter data |
| Sentry | Detecting application errors | United States | United States or European Union | Technical traces only, with aggressive scrubbing. No client name and no matter content |
The American CLOUD Act , said plainly
Supabase, Vercel, Amazon, Google, Stripe and Sentry are American companies. Even when their servers sit in Montreal, they remain subject to the CLOUD Act. That is true of very nearly every cloud legal software offered in Quebec, and we would rather write it down than leave it unsaid. Our intent is to move storage to a non-American provider hosted in Quebec as we grow.
What we do not do
We do not sell or share your data. We do not use it to train any model. No Dossio employee reads the contents of your matters, except at your written request and for the duration of a support intervention.
Your data belongs to you
You can obtain all of your matters, contacts, time entries, invoices and documents at any time, in an open format, with no exit fee and without having to justify yourself. Until self-serve export is available in your account settings, it happens on written request and we deliver it within 15 days — see the terms of use.
Last updated: 2026-08-11. Dossio is built to the Regulation respecting accounting and standards of professional practice of advocates (CQLR, c. B-1, r. 5). The Barreau du Québec certifies no software.
See also our privacy policy.