Subprocessors
Version 1.0 · Last revised: May 14, 2026
This page lists every third party that processes Filemark customer data on our behalf, together with the region, role, status, and cross-border posture for each. It is the canonical public version of our internal subprocessor manifest and is linked from the Service Privacy Policy, the Terms of Service, and the Security page. Always-on subprocessors process data for every Filemark tenant by default. Opt-in subprocessors are marketplace integrations that flow no data until a firm administrator explicitly enrolls them.
Always-on subprocessors
| Subprocessor | Purpose | Region | Cross-border? |
|---|---|---|---|
| Amazon Web Services | Backend hosting (Elastic Beanstalk), frontend hosting (Amplify), credential vault (Secrets Manager + KMS), transactional email (SES) | Montreal, Canada (AWS ca-central-1) | No |
| Amazon Web Services — Bedrock | AI inference for PDF document parsing and tax-account classification. Calls originate from ca-central-1 and route to Bedrock inference endpoints in ca-central-1, us-east-1, us-east-2, and us-west-2 over AWS’s private network. Region selection is performed by AWS; Filemark cannot pin a request to a specific region. No retention, no model training under AWS Bedrock commercial terms. PDF Vision is per-firm opt-in; the classifier is on by default and firm-toggleable. | Canada (ca-central-1) and United States (us-east-1, us-east-2, us-west-2) | Yes |
| Supabase | Managed Postgres, Storage, and Auth (hosted on AWS ca-central-1) | Montreal, Canada (AWS ca-central-1) | No |
Opt-in subprocessors
A firm administrator enrolls these one at a time from the integrations page. No data flows until enrollment, and the connector can be revoked at any time. Cross-border opt-ins surface an explicit data-transfer disclosure modal before enrollment.
| Subprocessor | Purpose | Region | Cross-border? |
|---|---|---|---|
| OneSpan Sign | E-signature for partner-binder release and engagement letters | Montreal, Canada | No |
| ISED Federal Corporations Registry | Federal corporation lookups (legal name, business number, registered office). No Filemark customer data is sent; lookups use only the corporation or business number. | Canada (Government of Canada) | No |
| Wolters Kluwer (CCH iFirm Web API) | Tax-software handoff push: T2 jacket and schedule cell values for the firm’s chosen client engagement | Canada (CCH iFirm Canadian deployment) | No |
| Xero (Accounting) | Read-only trial-balance, profit & loss, and balance-sheet pull from the firm’s connected Xero organisation. Granular read-only OAuth scopes only. | United States and Australia (firm chooses at Xero signup) | Yes |
| Microsoft (Graph — OneDrive / SharePoint) | Per-file fetch via Microsoft’s official OneDrive picker. Filemark cannot enumerate, browse, or list drives or folders. Only files the user explicitly picks are visible. Microsoft enforces this with the Files.SelectedOperations.Selected scope and per-file permission stamping. | Tenant-region dependent (firm’s Microsoft 365 tenant residency) | Depends on tenant |
Cross-border transfers
Filemark’s primary data residency is Canada (AWS ca-central-1). For each cross-border subprocessor above, the firm’s authorized administrator must explicitly acknowledge the transfer through an in-app data-transfer disclosure modal before any data flows. Firms can disable a cross-border integration at any time from the integrations page; the kill-switch is reversible. Filemark has conducted a Quebec Law 25 § 17 assessment for each cross-border transfer; a summary is available on request to privacy@filemark.ca.
Notification of changes
Material changes to this page — including the addition of a new active subprocessor, the removal of a subprocessor, or a change in a subprocessor’s data residency — are published here and announced by email to the firm’s administrators at least 30 days before they take effect. The version number above changes with each material edit.
Contact
Questions about a specific subprocessor, requests for the Law 25 § 17 transfer assessment, or DPA requests: privacy@filemark.ca.