Pagero Trust Center

Pagero’s application servers for Pagero Online are hosted in a resilient virtual environment. The primary and secondary data centers are located in Sweden. The data centers for Pagero Freight are located in Sweden. The data centers for Pagero Health are located in Germany and Sweden. The Gosocket Services are hosted in Microsoft Azure in North America. Pagero provides multi-tenant platforms, and customers cannot choose where the data is to be stored.

Pagero has Business Continuity Planning in place for its cloud services. The procedures are designed to ensure compliance with Pagero’s SLA.  Disaster recovery relies on manual failover to a secondary data center geographically separated from the primary data center.

Pagero Online is built to support continuous deployment with a zero-downtime policy. This is made possible by Pagero’s micro-service architecture. As a result, new features are released continuously to all customers. Pagero Online is based on four design pillars for maximization of capacity and scalability:

Pagero Online is a multi-tenant cloud platform where all users share the same infrastructure. All data is logically separated.

Vulnerability scanning and penetration tests for Pagero’s cloud services are conducted by an external provider. Vulnerability tests are performed monthly and penetration testing is carried out quarterly.

The personal data that Pagero processes will depend on the information you, as a customer, include in the documents handled by our services. Typically, this data includes contact details (such as names, emails and phone numbers) of your employees or personnel, references or contacts of your business partners, and any personal data embedded in the business documents, including data related to goods or services ordered, purchased or sold. 

Please see the DPA Appendix 1 for further details.

Pagero has processes in place to manage and validate third-party data access requests, including informing the customer in accordance with applicable law and the agreement. This is audited as a part of Pagero’s ISO 27701 certification. 

Pagero will process your data in the services for the purposes of:

Pagero has evaluated the NIS2 regulation and determined that it will directly impact the company. Pagero will be registered in Sweden, where the regulation is set to take effect on January 1, 2025. The organization is well-prepared, with an implemented Information Security Management System (ISMS) certified to ISO 27001 and ISO 27701 standards. Adaptation to specific requirements, such as incident reporting, is currently underway and will be completed in due time.

Pagero has evaluated DORA and determined that the regulation does not directly impact the company, as the services we deliver are not within its scope. However, we are fully aware of the regulation’s requirements and how they may influence our customers' needs regarding their suppliers. Pagero will assist customers in supplier evaluations in line with current agreements to help ensure their compliance with the regulation.

Similar to the way financial entities must conduct their own risk assessments, it is the customer's responsibility to ensure that their agreement with Pagero meets the necessary compliance obligations under DORA. While Pagero’s standard terms and conditions will be DORA-compliant, customers with older or customized agreements must verify that their contracts align with the regulation’s requirements.

Yes, Pagero requires all employees to undergo annual mandatory training on topics such as privacy, information security, and ethics, including anti-bribery and anti-competition.