Snapshot 256384
Raw (normalized text)
Scripts and page chrome removed; this is what change detection compares.
Skip to navigationSkip to main content WorkOS WorkOSOpens in new tab provides secure, enterprise-grade identity and access infrastructure for modern SaaS. We’re committed to transparency, privacy, and the protection of the authentication and authorization data that powers your application. compliance@workos.com Privacy PolicyOpens in new tab Compliance SOC 2 Type II GDPR CCPA HIPAA PCI DSS - SAQ D, Service Provider Resources View all Compliance Reports SOC 2 Type II + HIPAA Penetration Testing Network Penetration Test Cloud Security Assessment Application Penetration Test Attestations PCI AOC for SAQ-D.pdf Privacy & Legal Data Processing Addendum (DPA) Opens in new tab Certificate of Insurance (COI) Other resources WorkOS SOC 2 Bridge Letter Controls Updated less than a minute ago View all Customer Trust External support resources available Company commitments externally communicated Cybersecurity insurance maintained Product Security Data encryption utilized Control self-assessments conducted Vulnerability and system monitoring procedures established Infrastructure Security Encryption key access restricted Unique account authentication enforced Production application access restricted View 4 more Infrastructure Security controls Organizational Security Code of Conduct acknowledged by employees and enforced Visitor procedures enforced Data & Privacy Data retention procedures established Data classification policy established Internal Security Procedures Continuity and Disaster Recovery plans established Cybersecurity insurance maintained Development lifecycle established View 8 more Internal Security Procedures controls Subprocessors View all Amazon Web Services • Cloud Infrastructure United States Core Product Cloudflare • Edge Security & Traffic Routing United States Core Product Datadog • Logging & Monitoring United States Core Product Postmark • Email Delivery United States Core Product Updates View all Incident Data Security Incident Update Published November 6, 2026 We’ve identified the source of the unauthorized access to an internal tool used by our sales and customer-facing teams, and the affected data has been confirmed deleted. See our updated security bulletin for our findings, root cause, and security improvements: https://workos.com/security/bulletins/update-for-october-30th-2026-data-security-incidentOpens in new tab Incident Data Security Incident Published November 3, 2026 We are investigating unauthorized access to an internal tool used by our sales and customer-facing teams. See our security bulletin for details on our response: https://workos.com/security/bulletins/october-30th-2026-data-security-incidentOpens in new tab Security WorkOS statement on the April 2026 Vercel security incident Published April 19, 2026 WorkOS is aware of Vercel’s recently disclosed security incident. WorkOS uses Vercel in a limited capacity for certain hosted experiences. As part of our investigation, we reviewed available information from Vercel, including published indicators of compromise, and performed targeted analysis across relevant systems. Based on this review, we have no evidence that WorkOS systems, products, or customer environments were impacted by this incident. We continue to monitor the situation and will update this notice if our assessment changes. General New Subprocessor Update Published February 27, 2026 We are adding ClickHouse to our list of Subprocessors. This will be used to provide in-product reporting and insights. For more information, please visit the Subprocessors List within our Trust Center.