Vendor record · workato.com
What Workato promises about your data.
Where Workato publishes its promises, how long it gives you when it adds a sub-processor, and what has changed.
- Where it publishes
Workato lists its sub-processors at assets.ctfassets.net/khy5qy7zbpmq/6G0KNPqb4qza8MdzdCUGQA/b8c24f5f76ade628fc86271c3d61c46b/Workato_Sub-Processors_2026-01-21.pdf. We last read it on October 15, 2026.
- What has changed
We've recorded no change to its sub-processor list or data processing agreement between August 31, 2026 and September 15, 2026. Subscribers hear about a change the morning we read it; the public record shows it 30 days later.
- Its window
When it adds a sub-processor, its clause at assets.ctfassets.net/khy5qy7zbpmq/5WZQn48Q35CcQvqCsehisP/b10c6bdfe7c148771e92312154178583/Workato_Data_Processing_Addendum_Websites_2025-03-17.pdf (read September 30, 2026) gives you 10 days to object.
- Window
- 10
- Sub-processors
- 11
- Pages
- 8
- Copies
- 36
days to object when it adds a sub-processor
sub-processors named
pages we watch
dated copies of all its pages, since August 31, 2026
Workato DPA
Workato's data processing agreement is at workato.com/legal/dpa; we last read it on October 15, 2026. Workato's data processing agreement gives 10 days to object to a new sub-processor. Here is the clause, from our September 30, 2026 copy:
10
days to object
“Workato may from time to time engage new Sub-Processors, provided that at least thirty (30) days before enabling any new Sub-Processors to Process Personal Data, Workato will add such Sub-Processors to the List and notify Account Holder of such updates via the email address provided by Account Holder. Account Holder may object to such engagement in writing based on reasonable grounds within ten (10) days of receipt of the notice.”
Found automatically and not yet checked by a person. The quote is exact, and the link goes to the source. Nothing here says whether the term is good or bad, only that Workato published it.
assets.ctfassets.net/khy5qy7zbpmq/5WZQn48Q35CcQvqCsehisP/b10c6bdfe7c148771e92312154178583/Workato_Data_Processing_Addendum_Websites_2025-03-17.pdf · read 2026-09-30 · fingerprint c9d47d4436f0eee3…
What it says if you do not object
“If Account Holder does not object to the proposed Sub-Processor within the period above, the new Sub-Processor will be deemed an Authorized Sub- Processor for the purposes of this DPA.”
assets.ctfassets.net/khy5qy7zbpmq/5WZQn48Q35CcQvqCsehisP/b10c6bdfe7c148771e92312154178583/Workato_Data_Processing_Addendum_Websites_2025-03-17.pdf · read 2026-09-30
Notice windows across every vendor we watch · Silence as consent
Workato sub-processors
Workato publishes a sub-processor list at assets.ctfassets.net/khy5qy7zbpmq/6G0KNPqb4qza8MdzdCUGQA/b8c24f5f76ade628fc86271c3d61c46b/Workato_Sub-Processors_2026-01-21.pdf; we last read it on October 15, 2026. It names 11 entries. The entries, as the list prints them: Amazon Web Services Inc.; Auth0, LLC; Google LLC; Intercom Inc.; MongoDB Inc.; OpenAI LLC; Orderful, Inc.; Stripe Inc.; Twilio, Inc.; USA Inc.; Workato, Inc.. The same list is in the full table below. The public record holds no change to the list read before September 15, 2026. A change we read after September 15, 2026 is published 30 days after we read it.
11 named · full table
Every public change we have recorded · Where vendors publish their lists
How long Workato keeps your data
Workato's data processing agreement (assets.ctfassets.net/khy5qy7zbpmq/5WZQn48Q35CcQvqCsehisP/b10c6bdfe7c148771e92312154178583/Workato_Data_Processing_Addendum_Websites_2025-03-17.pdf, in the copy read September 30, 2026) says: “In general, the retention period is 30 days unless otherwise configured by the data exporter, and in no case exceeds 90 days.”
Retention windows vendors publish · What vendors say about training
What the pages say
Read automatically from the pages below and shown as printed. A missing row is a gap in our reading, not proof it isn’t there.
Sub-processors named · 11 · 1 name an AI provider we list
Amazon Web Services Inc.
Auth0, LLC
Provision of Agent X Support. United States https://auth0.com/
Google LLC
Intercom Inc.
Online chat United States https://www.intercom.com
MongoDB Inc.
Provision of Agent X Support.
United States
OpenAI LLCAI · OpenAI
Orderful, Inc.
Stripe Inc.
Twilio, Inc.
USA Inc.
Workato, Inc.
Certifications the trust page names · IRAP · ISO 27001 · ISO 42001 · PCI DSS · SOC 1
Laws the trust page names · HIPAA
The pages' own stamps: Last updated 2025-05 · Last updated 2026-02-24
The pages we watch
Every page we read, so you can check it. Each is re-read on a schedule, and we keep a dated copy when it changes.
Data processing agreement
assets.ctfassets.net/khy5qy7zbpmq/5WZQn48Q35CcQvqCsehisP/b10c6bdfe7c148771e92312154178583/Workato_Data_Processing_Addendum_Websites_2025-03-17.pdf2026-10-15
What this page doesn’t tell you
No score.
Nothing here rates Workato. A short notice window is a contract term, not a criticism.
Public pages only.
Private notices and negotiated terms are invisible to us. Your agreement may say something different.
Wrong? Tell us.
Corrections are free, always. We reply within 2–3 business days.
How we read a page · The change log
Work at Workato? With an email at workato.com you can claim this record, suggest pages we should watch, and take a free copy of it. Claiming changes nothing we publish.
Is Workato in your product? Hear the morning we read a change.
You get the lines that moved, in Workato’s own words, and the date any window closes. No card. Nothing to cancel.