# Workstreet

Workstreet declares [8 subprocessors](https://thirdpartyindex.com/vendors/workstreet#subprocessors) in [its subprocessor list](https://trust.workstreet.com/subprocessors), which we last checked on 2026-11-12 ([evidence](https://thirdpartyindex.com/evidence/222612)). They include [Google Cloud](https://thirdpartyindex.com/vendors/google-cloud), [Slack](https://thirdpartyindex.com/vendors/slack) and [HubSpot](https://thirdpartyindex.com/vendors/hubspot). No published changes since we first read it on 2026-11-06.

Workstreet (workstreet.com): subprocessors, data processing agreement, security documents and changes, as monitored by Third Party Index.

- Page: https://thirdpartyindex.com/vendors/workstreet
- Documents last verified: 2026-11-12
- Transparency rating: 67/100 (how much it publishes, not how secure it is): Subprocessor list 30/30; Processing locations 8/8; Purposes 7/7; Data processing addendum 0/12 (not found); Trust center 8/8; Privacy policy 6/6; security.txt 0/6 (not found); Security page 0/5 (not found); Status page 0/5 (not found); Vulnerability disclosure 0/5 (not found); Pages still reachable 8/8
- Supply chain: relies on 7 tracked vendors directly, 109 within two hops, 344 within three; 0 tracked vendors rely on it directly, 0 within two hops, 0 within three
- Cite as: Workstreet, Third Party Index, https://thirdpartyindex.com/vendors/workstreet (data CC BY 4.0)

## Documents

| Document | URL | Last verified | Last changed |
|---|---|---|---|
| Trust center | https://trust.workstreet.com/ | 2026-11-12 | 2026-11-12 |
| Subprocessor list | https://trust.workstreet.com/subprocessors | 2026-11-12 | 2026-11-06 |
| Privacy policy | https://www.workstreet.com/services/privacy | 2026-11-12 | 2026-11-06 |

## Subprocessors (8)

As its own list states them.

| Subprocessor | Purpose | Location | Listed since |
|---|---|---|---|
| [Checkr](https://thirdpartyindex.com/vendors/checkr.md) | Employee management | United States | 2026-11-06 |
| [Google Drive](https://thirdpartyindex.com/vendors/google-cloud.md) | Document management | United States | 2026-11-06 |
| [Google Workspace](https://thirdpartyindex.com/vendors/google-cloud.md) | Identity provider | United States | 2026-11-06 |
| [HubSpot](https://thirdpartyindex.com/vendors/hubspot.md) | Marketing / CRM | United States | 2026-11-06 |
| [Notion](https://thirdpartyindex.com/vendors/notion-com.md) | Collaboration | United States | 2026-11-06 |
| [Rippling](https://thirdpartyindex.com/vendors/rippling.md) | Employee management | United States | 2026-11-06 |
| [Slack](https://thirdpartyindex.com/vendors/slack.md) | Collaboration | United States | 2026-11-06 |
| [Vanta](https://thirdpartyindex.com/vendors/vanta.md) | Continuous security and compliance monitoring; Security | United States | 2026-11-06 |

Read from ([evidence](https://thirdpartyindex.com/evidence/222612)). CSV: https://thirdpartyindex.com/vendors/workstreet/subprocessors.csv

## Compliance

As its trust center lists them.

- Audited: SOC 2 ([evidence](https://thirdpartyindex.com/evidence/222614))
- Claimed: SOC 2 Type II ([evidence](https://thirdpartyindex.com/evidence/222614))

## Web Technologies

Workstreet's homepage made 367 requests to 26 domains, and 9 services controlled by another company. Loaded on 2026-11-07 by a browser that accepted nothing; other visits may load more or less. What a page loads is not a list of who receives customer data.

9 third parties by category: Analytics 4 (HubSpot, Clay, LinkedIn, Meta); CDN 2 (jsDelivr, Cloudflare); Advertising 1 (Google Cloud); Development 1 (reviewed: GitHub); JavaScript libraries 1 (Webflow). Each company that appears controlled by another organization is counted once, under the main category of the technologies detected from it on this homepage or, when none was, the category recorded from the company's own page (marked reviewed) or else the one it is usually detected as on other published homepages (marked as such); unclassified: none of these.

### Third parties (9)

- GitHub: 241 requests to raw.githubusercontent.com
- Webflow: 46 requests to website-files.com, d3e54v103j8qbb.cloudfront.net; Webflow 1.6.0, jQuery 3.5.1
- Google Cloud: 18 requests to google.com, googletagmanager.com, doubleclick.net, google-analytics.com; DoubleClick Floodlight, Google Analytics, Google Tag Manager (its subprocessor list names it too)
- HubSpot: 18 requests to hsforms.com, hsappstatic.net, hscollectedforms.net, hubspot.com, hs-analytics.net, hs-banner.com, hs-scripts.com, hsadspixel.net, hsforms.net, hubapi.com, hubspotusercontent-na1.net; HubSpot, HubSpot Analytics (its subprocessor list names it too)
- Clay: 4 requests to claydar.com; Clay Web Intent
- LinkedIn: 4 requests to linkedin.com, licdn.com; Linkedin Insight Tag
- Meta: 4 requests to facebook.com, facebook.net; Facebook Pixel 2.9.438
- jsDelivr: 2 requests to jsdelivr.net; jsDelivr
- Cloudflare: 1 request to cloudflare.com; PIXIjs 7.2.4, cdnjs

### First party (1)

- Workstreet: 29 requests to workstreet.com; Cloudflare, GSAP 3.15.0, HSTS, HTTP/3, Linkedin Ads, LottieFiles, Open Graph, Swiper, Webpack, YouTube

7 tracked companies loaded by the homepage are not in Workstreet's subprocessor list. A website can use a service without it processing customer data.

## Subprocessor of (0)

No tracked vendor lists it.

## Incidents reported by Workstreet's subprocessors

Incidents reported in the last 30 days on their own status pages by 4 vendors Workstreet lists as subprocessors. A subprocessor list names a company, not the service an incident touched.

- 2026-11-11: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported Performance degraded (minor)
- 2026-11-10: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Some Notion Agent sessions may hang or stop updating (major)
- 2026-11-10: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Workstreet lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-11-10: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported Salesforce integrations disconnecting (minor)
- 2026-11-07: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported Platform APIs are returning 403s (no impact stated)
- 2026-11-03: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Workstreet lists as a subprocessor, reported Missing check results for GitHub pull requests (minor)
- 2026-11-02: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Workstreet lists as a subprocessor, reported HubSpot is experiencing issues (no impact stated)
- 2026-10-29: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Workstreet lists as a subprocessor, reported Incorrect security-training and background-check test results (no impact stated)
- 2026-10-29: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported Issues editing Supergroups (no impact stated)
- 2026-10-28: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported QuickBooks data import delayed for some customers (minor)
- 2026-10-28: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported Rippling AI is down (major)
- 2026-10-23: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Workstreet lists as a subprocessor, reported Some HubSpot tools may be unavailable for some users (no impact stated)
- 2026-10-23: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Users unable to access Notion (critical)
- 2026-10-23: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported PHP2Shell (CVE-2026-109618, CVE-2026-109619) (no impact stated)
- 2026-10-22: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Notion MCP query\_data\_source tool is temporarily unavailable in Claude clients (major)
- 2026-10-22: [HubSpot](https://thirdpartyindex.com/vendors/hubspot#status), which Workstreet lists as a subprocessor, reported Update on PHP security vulnerability (no impact stated)
- 2026-10-21: [Vanta](https://thirdpartyindex.com/vendors/vanta#status), which Workstreet lists as a subprocessor, reported Stale data for CloudflareDomainInventory and CloudflareZoneRule (major)
- 2026-10-20: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Security update: Preventative certificate security measures (no impact stated)
- 2026-10-20: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Unable to install connections created by other workspace members (major)
- 2026-10-18: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Some Notion Agent requests may stop before completion (minor)
- 2026-10-15: [Rippling](https://thirdpartyindex.com/vendors/rippling#status), which Workstreet lists as a subprocessor, reported Products partially degraded (major)
- 2026-10-14: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Cursor-powered Custom Agents unable to load Notion tools (no impact stated)
- 2026-10-13: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Form submission issues (resolved) (no impact stated)
- 2026-10-13: [Notion](https://thirdpartyindex.com/vendors/notion-com#status), which Workstreet lists as a subprocessor, reported Degraded performance in Notion and the Notion API (no impact stated)

The subprocessor list as we read it on any date: https://thirdpartyindex.com/labs/time-machine/workstreet

---

Third Party Index (https://thirdpartyindex.com) monitors vendors' public security and privacy documents and keeps each version as evidence. Data CC BY 4.0 (https://creativecommons.org/licenses/by/4.0/); vendors' own documents are theirs. API: https://thirdpartyindex.com/api