Legal
Sub-processors
WorkVib uses the following third-party service providers to deliver, secure, support, and improve the Service. Each provider is required to protect personal data and process it only for the authorized purpose.
Infrastructure and data hosting
| Sub-processor | Purpose | Data location | Data handled |
|---|---|---|---|
| Amazon Web Services, Inc. | Hosting, storage, network protection, and transactional email through SES. | Region selected for production infrastructure, with AWS global edge services where used. | Account, workspace, project, task, message, file, log, and email data. |
| MongoDB, Inc. / MongoDB Atlas | Primary operational database where configured. | Region selected for the production cluster. | Workspace, user, task, project, chat, note, billing-status, and audit data. |
| PostgreSQL hosting provider | Relational mirror or primary storage for selected workspace features. | Region selected for the production database. | Workspace, project, task, chat, search, and reporting data. |
| Redis hosting provider | Sessions, OTPs, caching, rate limits, and Socket.IO coordination. | Region selected for the production cache. | Session tokens, OTP metadata, cache keys, and realtime coordination data. |
| Cloudflare, Inc. | DNS, edge security, SSL, and bot protection where configured. | Global edge network. | IP address, user-agent, request metadata, and security challenge data. |
Billing
| Sub-processor | Purpose | Data location | Data handled |
|---|---|---|---|
| Paddle.com Market Limited | Merchant of Record for WorkVib subscription checkout, tax, invoicing, and payment processing. | UK / EU / US. | Billing name, billing email, address, country, subscription status, payment method details handled by Paddle. |
Authentication and integrations
| Sub-processor | Purpose | Data location | Data handled |
|---|---|---|---|
| Google LLC | Google Sign-In and optional Google integrations such as Calendar where enabled. | Global. | Name, email, Google user ID, OAuth tokens, and integration metadata where authorized. |
| Microsoft Corporation | Optional Microsoft SSO or Teams/Calendar integrations when enabled. | Global. | Account identity and integration metadata authorized by the workspace. |
| GitHub, Inc. | Optional repository or workflow integrations when enabled. | Global. | Repository metadata and integration events authorized by the workspace. |
Operations and analytics
| Sub-processor | Purpose | Data location | Data handled |
|---|---|---|---|
| Functional Software, Inc. (Sentry) | Error monitoring and diagnostics where enabled. | EU / US. | Stack traces, request metadata, user-agent, and diagnostic context. |
| PostHog Inc. | Optional product analytics and session replay where consented and enabled. | US / EU depending on project configuration. | Page views, click events, anonymous IDs, and masked session replay data. |
Changes and objections
We will update this page when sub-processors are added, removed, or materially changed. To subscribe to updates or raise a reasonable objection, email support@workvib.com.