WorkSwarm
Trust Center - Confidential
Version 1.0
Updated 2026-05-08
Privacyv1.0 · Updated 2026-05-08 · 5 pages
Sub-processor Register
Complete list of third-party sub-processors with access to customer data, including purpose, data categories, DPA status, and review dates.
Prepared by Data Protection Officer, WorkSwarm, Inc.
Contents
About This Document
This register lists every third-party sub-processor that may access, process, or store customer data as part of WorkSwarm's service delivery. It is maintained per our contractual commitment under Standard Contractual Clauses (SCCs), GDPR Article 28, and the DPDP Act.
Changes: Customers receive 30-day advance email notice before any new sub-processor goes live. Customers may object per the DPA objection procedure; unresolved objections allow penalty-free termination.
1. Infrastructure Sub-processors
These sub-processors provide the cloud infrastructure on which WorkSwarm runs.
| Sub-processor | Country | Purpose | Data Categories | DPA Status | Joined | Last Review |
|---|---|---|---|---|---|---|
| Amazon Web Services (AWS) | US, India, EU | Primary cloud infrastructure - compute, storage, networking, KMS | All tenant data (encrypted at rest and in transit) | Signed (AWS DPA + SCCs) | 2024-Q1 | 2026-Q1 |
| Google Cloud Platform (GCP) | US, EU | Warm disaster recovery, analytics workloads | Tenant data (encrypted replicas for DR) | Signed (Google Cloud DPA + SCCs) | 2025-Q3 | 2026-Q1 |
2. AI / LLM Sub-processors
These sub-processors provide large language model inference for AI agent capabilities.
| Sub-processor | Country | Purpose | Data Categories | DPA Status | Joined | Last Review |
|---|---|---|---|---|---|---|
| Anthropic | US | LLM inference (Claude models) | Prompts (PII-redacted before transmission). No training on customer data per DPA. | Signed (Anthropic DPA + no-training clause) | 2024-Q2 | 2026-Q1 |
| Google (Gemini) | US, India | LLM inference (Gemini models) | Prompts (PII-redacted before transmission). No training on customer data per DPA. | Signed (Google AI DPA + no-training clause) | 2025-Q1 | 2026-Q1 |
3. Communication Sub-processors
These sub-processors enable communication features.
| Sub-processor | Country | Purpose | Data Categories | DPA Status | Joined | Last Review |
|---|---|---|---|---|---|---|
| Twilio | US, India | SMS and voice communication | Phone numbers, message content (encrypted) | Signed (Twilio DPA) | 2024-Q3 | 2026-Q1 |
| ElevenLabs | US | Voice synthesis for AI agents | Voice consent files, synthesized audio | Signed (ElevenLabs DPA) | 2024-Q4 | 2026-Q1 |
4. Payment Sub-processors
These sub-processors handle billing and payment processing.
| Sub-processor | Country | Purpose | Data Categories | DPA Status | Joined | Last Review |
|---|---|---|---|---|---|---|
| Stripe | US, India | Payment processing and billing | Billing information only (name, email, payment method). No tenant workspace data. | Signed (Stripe DPA) | 2024-Q1 | 2026-Q1 |
5. Change History
Record of sub-processor additions, removals, and changes.
| Date | Change | Sub-processor | Customer Notice |
|---|---|---|---|
| 2025-Q3 | Added | Google Cloud Platform (GCP) | 30-day notice sent 2025-06-15 |
| 2025-Q1 | Added | Google (Gemini) | 30-day notice sent 2024-12-01 |
| 2024-Q4 | Added | ElevenLabs | 30-day notice sent 2024-09-15 |
| 2024-Q3 | Added | Twilio | 30-day notice sent 2024-06-15 |
| 2024-Q2 | Added | Anthropic | 30-day notice sent 2024-03-15 |
| 2024-Q1 | Initial | AWS, Stripe | Included in initial DPA |
6. Objection Procedure
If you wish to object to a new sub-processor:
1. Email trust@workswarm.ai within 30 days of the change notice.
2. State the specific sub-processor and your objection grounds.
3. WorkSwarm will engage in good-faith discussion to address concerns (e.g., additional contractual protections, data flow restrictions).
4. If the objection cannot be resolved within the 30-day notice period, you may terminate the affected services without penalty per the DPA.
Subscribe to sub-processor change notifications: trust@workswarm.ai
Download as CSV: /trust/subprocessors.csv
Disclaimer:This document is provided for informational purposes and represents WorkSwarm's current security posture and planned controls. Legal templates are provided as starting points and should be reviewed by your legal counsel before execution. Certification timelines are targets and subject to change based on auditor availability and assessment outcomes.
© 2026 WorkSwarm, Inc. · Confidential · workswarm.ai/trust
Sub-processor Register
5 pages · PDF