WorkOS
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | 8 / 8 | |
| Purposes | 7 / 7 | |
| Data processing addendum | 12 / 12 | |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 89 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For WorkOS's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/workos"><img src="https://thirdpartyindex.com/badge/workos.svg" alt="WorkOS transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/workos)Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list vanta | snapshot | ||
| Data processing addendum | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page statuspage | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services | Cloud Infrastructure; Core Product | United States | |
| Channeled | Customer Support Tool; Support and account management | United States | |
| ClickHouse | Application Analytics; Data and analytics | United States | |
| Close | Sales and Marketing; Support and account management | United States | |
| Cloudflare | Core Product; Edge Security & Traffic Routing | United States | |
| Datadog | Core Product; Logging & Monitoring | United States | |
| dbtCloud | Data Transformation; Data and analytics | United States | |
| Fivetran | Data and analytics; Logging & Monitoring | United States | |
| Google Analytics | Data and analytics; Marketing Analytics | United States | |
| Hubspot | Sales and Marketing; Support and account management | United States | |
| IPLocate | IP Lookup; [Radar](https://workos.com/radar) | United States | |
| Mode | Application Analytics; Data and analytics | United States | |
| Postmark | Core Product; Email Delivery | United States | |
| Prelude | SMS Communications; [Radar](https://workos.com/radar) | United States | |
| Salesforce | Subscription Management; Support and account management | United States | |
| Segment | Data Pipeline Orchestration; Data and analytics | United States | |
| Sendgrid | Core Product; Email Delivery | United States | |
| SendSafely | Customer Support Tool; Support and account management | United States | |
| Sentry | Core Product; Error Handling, User Support | United States | |
| Snowflake | Data Warehouse; Data and analytics | United States | |
| Stripe | Billing; Core Product | United States | |
| Twilio | SMS communications; [MFA API](https://workos.com/docs/mfa) | United States | |
| Vercel | Application Hosting; Core Product | United States | |
| Zapier | Support and account management; Workflow Automation | United States | |
| Zendesk | Customer Support Tool; Support and account management | United States |
Listed as a subprocessor by (38)
Purposes as each company states them.
Abacum abacum.ai Single-Sign-on Service
Abusix abusix.com Authentication; Authentication Platform for app.abusix.com
Anaconda anaconda.com Development APIs and tools; SSO and enterprise authentication
Anthropic anthropic.com Products: Claude for Work, Claude Developer Platform [More Information](https://support.anthropic.com/en/articles/9797544-setting-up-single-sign-on-on-the-enterprise-plan); Security, Single Sign-On
Atlassian atlassian.com SCIM provisioning
Baseten baseten.co Single Sign On
Clay clay.com Authentication support
CoLab colabsoftware.com Customer identity provider for user management and SSO in the CoLab application.; Engineering
Cursor cursor.com Enterprise authentication and SSO/SCIM provider. See [WorkOS](https://trust.workos.com/subprocessors).; SSO/SCIM provider
Cyberhaven cyberhaven.com Directory integration service
Daily daily.co SSO authentication provider
Daytona daytona.io Identity Services
Decagon decagon.ai Authentication and SSO provider
Depot depot.dev Identity Management
Drata drata.com [Drata and SafeBase] [Opt-in] If configured to integrate with a customer's SSO provider(s), WorkOS facilitate Single Sign-On (SSO) for its customers' users.
Factory factory.ai
Fillout fillout.com
Hadrius hadrius.com
Hex hex.tech User management and audit logs
Netlify netlify.com Identity and Access Management
OpenAI openai.com Cross-domain identity management
Otter Meeting Agent otter.ai Directory sync for enterprise login workflow.
Plain plain.com Authentication
PlanetScale planetscale.com Single sign-on and directory sync
Polytomic polytomic.com
Prefect prefect.io User Authentication
Pylon usepylon.com Authentication
Relevance AI relevanceai.com Authentication; Engineering
Soraban soraban.com Supports secure user authentication for all users accessing Soraban.
SpaceXAI x.ai Services and support
Speechmatics speechmatics.com User authentication and authorisation
Statuspage statuspage.io SCIM provisioning
Vanta vanta.com Optional integrations and tools; SCIM integration (customer optional)
Vercel vercel.com Audit log services
Zuddl zuddl.com Enterprise SSO
incident.io incident.io SCIM/SAML Authentication Flows
replit replit.com
turbopuffer turbopuffer.com Dashboard authentication
Service status
10 incidents in the last 44 days (5 major or critical, 2 minor, 3 with no stated impact) · typically resolved in 51 min · longest major: 2 h 26 min
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Elevated API Errors | major | 39 min evidence | |
| Elevated Admin Portal Errors | major | 51 min evidence | |
| Form POST failures for some Authkit customers | major | 2 h 1 min evidence | |
| Static asset delivery failures | major | 2 h 26 min evidence | |
| Degraded outbound email delivery | minor | 34 min evidence | |
| Degraded Vault pages in Dashboard | none | 15 min evidence | |
| Dashboard sign-in errors | major | 1 h 5 min evidence | |
| Elevated errors on AuthKit authentication endpoints | none | — evidence |
As WorkOS's status page reports its own incidents (scheduled maintenance left out), read every few hours since .
Changes
None since tracking began.