Snapshot 12869
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content WorkOS WorkOSOpens in new tab provides secure, enterprise-grade identity and access infrastructure for modern SaaS. We’re committed to transparency, privacy, and the protection of the authentication and authorization data that powers your application. compliance@workos.com Privacy PolicyOpens in new tab Compliance SOC 2 Type II GDPR CCPA HIPAA PCI DSS - SAQ D, Service Provider Resources View all Compliance Reports SOC 2 Type II + HIPAA Penetration Testing Network Penetration Test Cloud Security Assessment Application Penetration Test Attestations PCI AOC for SAQ-D.pdf Privacy & Legal Data Processing Addendum (DPA) Opens in new tab Certificate of Insurance (COI) Controls View all Customer Trust External support resources available Company commitments externally communicated Cybersecurity insurance maintained Product Security Data encryption utilized Control self-assessments conducted Vulnerability and system monitoring procedures established Infrastructure Security Encryption key access restricted Unique account authentication enforced Production application access restricted View 4 more Infrastructure Security controls Organizational Security Code of Conduct acknowledged by employees and enforced Visitor procedures enforced Data & Privacy Data retention procedures established Data classification policy established Internal Security Procedures Continuity and Disaster Recovery plans established Cybersecurity insurance maintained Development lifecycle established View 8 more Internal Security Procedures controls Subprocessors View all Amazon Web Services • Cloud Infrastructure United States Core Product Cloudflare • Edge Security & Traffic Routing United States Core Product Datadog • Logging & Monitoring United States Core Product Postmark • Email Delivery United States Core Product Updates View all Security WorkOS statement on the April 2026 Vercel security incident Published April 19, 2026 WorkOS is aware of Vercel’s recently disclosed security incident. WorkOS uses Vercel in a limited capacity for certain hosted experiences. As part of our investigation, we reviewed available information from Vercel, including published indicators of compromise, and performed targeted analysis across relevant systems. Based on this review, we have no evidence that WorkOS systems, products, or customer environments were impacted by this incident. We continue to monitor the situation and will update this notice if our assessment changes. General New Subprocessor Update Published February 27, 2026 We are adding ClickHouse to our list of Subprocessors. This will be used to provide in-product reporting and insights. For more information, please visit the Subprocessors List within our Trust Center. General Welcome to the WorkOS Trust Center Published January 23, 2026 You can now subscribe to updates from WorkOS’ Trust Center to receive notifications about updates to our compliance and security programs. These updates will include changes to compliance resources, assessments of known vulnerabilities, and updates to our subprocessors.