Sub-processors
Effective Date: January 1, 2026
Last Updated: April 24, 2026
WorkPerfect Co ("WorkPerfect") engages the sub-processors listed below to support the delivery of the WorkPerfect platform (the "Service"). Each sub-processor is bound by a written agreement that requires confidentiality and appropriate data protection terms, including the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum, or equivalent mechanisms where applicable to international data transfers.
This list applies to personal information processed by WorkPerfect on behalf of its customers as a processor. WorkPerfect's use of additional vendors for its own corporate operations (such as legal, accounting, and payroll providers) is governed by our Privacy Policy rather than this list.
Current Sub-processors
| Sub-processor | Service Provided | Categories of Data Processed | Processing Location | Transfer Mechanism (where applicable) |
|---|---|---|---|---|
| Amazon Web Services, Inc. ("AWS") | Cloud infrastructure hosting (compute, storage, database, content delivery, key management, secrets management, web application firewall, managed AI inference) | All Customer Data and account data processed by the Service | United States (primary region: us-east-1) | EU SCCs and UK IDTA, as incorporated into the AWS GDPR Data Processing Addendum and applicable to the AWS regions used. AWS is also self-certified under the EU-US, UK, and Swiss-US Data Privacy Frameworks. |
| Resend (Resend, Inc.) | Transactional email delivery (account, security, and billing notifications) | Recipient email addresses, email subject and body content, and delivery metadata | United States | EU SCCs and UK IDTA, as incorporated into Resend's Data Processing Addendum, where applicable to international transfers. |
AWS Services in Use
The Service is built on AWS and uses the following AWS services to process and store personal information:
- Amazon ECS / AWS Fargate — application compute.
- Amazon RDS for PostgreSQL — primary application database.
- Amazon ElastiCache for Valkey — caching and rate limiting.
- Amazon S3 — object storage (including database backups and document storage).
- Amazon CloudFront — content delivery network.
- AWS WAF and AWS Shield — web application firewall and DDoS protection.
- AWS Key Management Service (KMS) — encryption key management.
- AWS Secrets Manager — secrets storage.
- Amazon Bedrock — managed inference for limited Service features (including translation and notification drafting). Per the AWS Bedrock service terms, AWS does not use customer inputs or outputs to train Bedrock foundation models.
- Amazon CloudWatch — application and infrastructure logging.
Notification of Changes
WorkPerfect will provide customers with at least 30 days' prior notice of any addition of, or material change to, our sub-processors. To receive notifications, email privacy@work-perfect.com to be added to the sub-processor change list.
If a customer has a reasonable, documented objection on data protection grounds to a new sub-processor, the customer may exercise the objection rights set out in the WorkPerfect Data Processing Addendum.
Affiliates
WorkPerfect Co has no subsidiaries or affiliates. We do not engage affiliated entities as sub-processors.
Contact
For questions about this list:
WorkPerfect Co
Email: privacy@work-perfect.com