Skip to main content
Legal

Data Processing Agreement (DPA)

Data Processing Agreement under GDPR Article 28 will be published before launch.

Subject matter

This DPA governs obligations between Customer (Data Controller) and Workinno (Data Processor) regarding personal data processed during use of the Workinno service.

Sub-processors

Sub-processors used for service delivery include Stripe (payments), Resend (email), Cloudflare (CDN/security), Hetzner (servers), Anthropic and OpenAI (AI assistant), Mapbox (maps), MaxMind (location), Sentry (error reporting), Meta Platforms (WhatsApp/Messenger/Instagram — if you connect), Google and Microsoft (Gmail/Outlook — if you connect). The current list is published in Privacy Policy §4.

Security measures

Encryption (TLS in transit, minimum version 1.2, Argon2id passwords), access control, audit logs, regular backups and incident management policy are applied.