WorkComposer Subprocessors
Last modified: September 27, 2026
WorkComposer Inc (“WorkComposer”) uses a small number of trusted third-party service providers (“Subprocessors”) to help us deliver, secure, and support our Services. A Subprocessor is a third party that Processes Personal Data on our behalf. This page lists our current Subprocessors, the purpose for which each is engaged, and where it Processes data.
We remain responsible for our Subprocessors and impose data-protection obligations on each of them that are, in substance, no less protective than those in our Data Processing Agreement. Defined terms on this page have the meaning given in our Data Processing Agreement.
Current Subprocessors
| Subprocessor | Purpose | Data-Processing location |
|---|---|---|
| Amazon Web Services, Inc. (AWS) | Cloud hosting and infrastructure: application hosting, object storage of screenshots and files (S3), transactional email delivery (SES), and message queuing (SQS). | United States (region us-east-1) |
| Stripe, Inc. | Payment processing and subscription billing for account owners. | United States / global (European operations via Stripe Payments Europe, Ltd., Ireland) |
| Google LLC | Bot/abuse protection (reCAPTCHA Enterprise), sign-in via Google OAuth, and website/product analytics (Google Analytics). | United States |
| Usercentrics GmbH | Cookie and consent management on our websites (consent management platform). | European Union (Germany) |
Customer-selected third-party services
A Customer may direct WorkComposer to disclose limited data to a service the Customer or its Authorized User selects, such as an AI assistant connected through the user's own provider account. These customer-selected recipients are not WorkComposer Subprocessors because WorkComposer does not engage them to process Personal Data on our behalf. The Customer is responsible for approving the recipient, its account type and settings, any required contract or transfer mechanism, and applicable workforce notice. If WorkComposer later engages an AI provider on our own behalf, we will reassess that relationship and update this list when required.
Infrastructure and region
WorkComposer hosts its production environment on Amazon Web Services in the United States (region us-east-1). Screenshots and files are stored in AWS S3, transactional email is sent via AWS SES, and background processing uses AWS SQS. Information about how we handle transfers of Personal Data from the EEA, UK, and Switzerland to the United States is set out in our International Data Transfer note and our Data Processing Agreement.
Changes to this list and how to be notified
- update this page with the new Subprocessor and its purpose and location; and
- notify subscribed customers in advance, giving an opportunity to raise a reasonable, data-protection-based objection, in accordance with our Data Processing Agreement (Section 7).
To be notified of changes, email privacy@workcomposer.com with the subject “Subprocessor updates” and we will notify you in advance of any new Subprocessor.
Questions
For questions about our Subprocessors or data processing, contact privacy@workcomposer.com.