Snapshot 12869

Document
Trust center
URL
https://trust.workos.com/
Fetched
HTTP status
200
Content type
text/html
Fetch mode
browser
Size
122700 bytes
SHA-256 (raw)
262e0f82f9928a61820bb23aebc183fad6d08938dd85e1e0561dc2d56ec9d8d9
SHA-256 (normalized text)
83462c82d95dda47fde8bdc2f63f322ee17d566b16427cd546d0dc181295fe11

Raw (normalized text)

Scripts and page chrome removed; this is what change detection compares.

Skip to navigationSkip to main content
WorkOS
WorkOSOpens in new tab provides secure, enterprise-grade identity and access infrastructure for modern SaaS. We’re committed to transparency, privacy, and the protection of the authentication and authorization data that powers your application.
compliance@workos.com
Privacy PolicyOpens in new tab
Compliance
SOC 2 Type II
GDPR
CCPA
HIPAA
PCI DSS - SAQ D, Service Provider
Resources
View all
Compliance Reports
SOC 2 Type II + HIPAA
Penetration Testing
Network Penetration Test
Cloud Security Assessment
Application Penetration Test
Attestations
PCI AOC for SAQ-D.pdf
Privacy & Legal
Data Processing Addendum (DPA)
Opens in new tab
Certificate of Insurance (COI)
Controls
View all
Customer Trust
External support resources available
Company commitments externally communicated
Cybersecurity insurance maintained
Product Security
Data encryption utilized
Control self-assessments conducted
Vulnerability and system monitoring procedures established
Infrastructure Security
Encryption key access restricted
Unique account authentication enforced
Production application access restricted
View 4 more Infrastructure Security controls
Organizational Security
Code of Conduct acknowledged by employees and enforced
Visitor procedures enforced
Data & Privacy
Data retention procedures established
Data classification policy established
Internal Security Procedures
Continuity and Disaster Recovery plans established
Cybersecurity insurance maintained
Development lifecycle established
View 8 more Internal Security Procedures controls
Subprocessors
View all
Amazon Web Services
•
Cloud Infrastructure
United States
Core Product
Cloudflare
•
Edge Security & Traffic Routing
United States
Core Product
Datadog
•
Logging & Monitoring
United States
Core Product
Postmark
•
Email Delivery
United States
Core Product
Updates
View all
Security
WorkOS statement on the April 2026 Vercel security incident
Published April 19, 2026
WorkOS is aware of Vercel’s recently disclosed security incident. WorkOS uses Vercel in a limited capacity for certain hosted experiences.
As part of our investigation, we reviewed available information from Vercel, including published indicators of compromise, and performed targeted analysis across relevant systems.
Based on this review, we have no evidence that WorkOS systems, products, or customer environments were impacted by this incident.
We continue to monitor the situation and will update this notice if our assessment changes.
General
New Subprocessor Update
Published February 27, 2026
We are adding ClickHouse to our list of Subprocessors. This will be used to provide in-product reporting and insights. For more information, please visit the Subprocessors List within our Trust Center.
General
Welcome to the WorkOS Trust Center
Published January 23, 2026
You can now subscribe to updates from WorkOS’ Trust Center to receive notifications about updates to our compliance and security programs. These updates will include changes to compliance resources, assessments of known vulnerabilities, and updates to our subprocessors.