Security & privacy
A driving school holds names, phone numbers, dates of birth and driver numbers for every learner. Pamio is built so that data stays in Ireland, stays encrypted, and is seen only by the people who should see it.
What we do
The measures below run for every school on Pamio, from a solo instructor to a school of twenty. Nothing to switch on.
Everything between your phone and Pamio travels over HTTPS with TLS. Your diary, students and conversations are stored on encrypted disks, and so is every backup. Passwords are never stored, only a secure hash of them.
Pamio runs on Amazon Web Services in Ireland. The database and the services that hold your data sit inside a private network with no public address; only the parts that must answer the internet do. The whole platform is monitored around the clock and alerts the founders directly.
Your students are yours. We never sell, share or advertise with your data, and we never use it to train anything. Pam reads a conversation only to book, move or remind, and hands anything else to you.
All data is stored in the EU, in Ireland, and never moves region. The database is backed up every day and the backups are kept for seven days, so a mistake can be undone. When a school closes its account its data is removed; an individual student can be deleted from the app at any time.
If a server fails, the platform replaces it automatically within minutes, with nobody needing to be woken, and your diary carries on. The database is backed up automatically every day and can be restored to any point in the last seven days. A new release takes traffic only once it has passed its health checks, and the founders are alerted the moment anything is down.
Every person signs in as themselves, with their own login, as an admin or an instructor. What they can see is decided on our servers, not in the app, so a school can only ever reach its own data and an instructor only their own students. Remove someone and their access ends that minute, on every device.
Access
Two staff roles, set by the school, and no login for students at all. The rules are the same on the phone, the web and for Pam.
Every instructor, student and booking. Books, moves and cancels for anyone, adds and removes staff, connects the WhatsApp number and phone line, sets the rules Pam works to, and handles billing. The only role that can close the account. A school can have more than one admin, and a teaching owner is an admin who also instructs.
Their own diary, their own students, their own RSA log. Never sees another instructor’s learners, and cannot change school settings.
Your students never sign in to Pamio. They message the school on WhatsApp, ring, or email, as they always did. The only page a student ever opens is their own booking link, which shows their lessons and nobody else’s, and nothing of the school’s diary.
Providers
A small set of providers run Pamio with us, each under contract and each processing data only on our instructions. Where one sits outside the EU the transfer is covered by Standard Contractual Clauses. The full list, and what each one sees, is in our privacy policy.
Pam’s AI providers receive the booking conversation and nothing else: no card details, no RSA login, no files. Anthropic reads the messages; OpenAI handles the voice on a phone call. Under our agreements your conversations are not used to train their models.
GDPR
Pamio is an Irish company under the Irish Data Protection Commission. For your school’s data we are the processor and you remain the controller, which is the arrangement the regulation expects. We process your students’ data only on your instructions, keep it only in the EU and only as long as you keep the account, and a data processing agreement is available on request.
A founder answers, not a form.