# Worklytics

Worklytics (worklytics.co): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/worklytics
- Documents last verified: 2026-10-03
- Transparency rating: 77/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 5/5; Status page 5/5; Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 3 tracked vendors directly, 52 within two hops, 254 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Worklytics, Third Party Index, https://thirdpartyindex.com/vendors/worklytics (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.worklytics.co/ | 2026-10-03 | 2026-10-03 |
| Subprocessor list | https://trust.worklytics.co/subprocessors | 2026-10-03 | 2026-10-03 |
| Privacy policy | https://www.worklytics.co/privacy-policy | 2026-10-03 | 2026-10-03 |
| Terms | https://www.worklytics.co/terms-of-service | 2026-10-03 | 2026-10-03 |
| Security page | https://www.worklytics.co/worklytics-security | 2026-10-03 | 2026-10-03 |
| Status page | https://www.worklytics-status.com/ | 2026-10-03 | 2026-10-03 |

## Subprocessors (3)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [DocSend, Inc.](https://thirdpartyindex.com/vendors/docsend.md) | DocSend is used to securely deliver Reports as part of our Reports-as-a-Service offering. Customer reports are deleted from DocSend in accordance with our Data Retention policy. | report delivery | 2026-10-03 |
| [Google Cloud Platform](https://thirdpartyindex.com/vendors/google-cloud.md) | Worklytics hosts our platform in Google Cloud Platform, using services including App Engine, BigQuery, Cloud Datastore, Cloud Storage, Compute Engine, Looker, and Pub/Sub. Vanta and GCP Security Health Analytics continuously monitor our GCP infrastructure in real-time for compliance controls aligned to SOC 2, ISO 27001, CIS 1.1-1.5. Customer data stored in GCP is deleted in accordance with our Data Retention Policy.; cloud infrastructure | US or EU | 2026-10-03 |
| [SendGrid](https://thirdpartyindex.com/vendors/sendgrid.md) | Worklytics uses SendGrid to send transactional email to users of our platform. This includes notifications, verifications, etc. Limited PII (email addresses) is retained in SendGrid's logs for a short duration (~30 days). | email | 2026-10-03 |

Read from ([evidence](https://thirdpartyindex.com/evidence/39226)). CSV: https://thirdpartyindex.com/vendors/worklytics/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 Type II, SOC 2 Type I ([evidence](https://thirdpartyindex.com/evidence/39224))
- Claimed: GDPR, CCPA/CPRA ([evidence](https://thirdpartyindex.com/evidence/39224))

## Subprocessor of (0)

No tracked vendor lists it.

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api