Workzoom sub-processor list.

What this list is

Workzoom relies on a small number of vetted service providers to operate the workzoom.com website and to deliver the Workzoom application. Each provider receives only the data necessary for its function, under written data protection terms at least as strict as those in our Data Processing Agreement.

This list is published in full for transparency to data subjects, prospective customers running vendor reviews, and Quebec residents under Law 25. Active customers are notified at least 30 days before we add or replace any sub-processor that handles application data. To subscribe to change notifications, contact info@workzoom.com.

Application sub-processors — customer data

These are the only third parties that process Personal Information held inside the Workzoom application. They are governed by the Workzoom Data Processing Agreement and are the list referenced by Annex 3 of that agreement.

Vendor	Purpose	Data categories	Processing location
Amazon Web Services Inc. Privacy policy	Primary cloud hosting for the Workzoom application, database, file storage, and backups. Transactional email delivery through Amazon SES (notifications, workflow and system email).	All Personal Information held in the application, encrypted at rest and in transit. Recipient email address and message content for transactional email.	AWS Canada (Central, ca-central-1) by default; US clients may elect AWS US-region hosting at contract
HireAbility.com LLC Privacy policy	Candidate resume parsing for the recruiting module. Used only when the recruiting module is in use and a resume is uploaded. Can be disabled at customer request, in which case no data is sent to this sub-processor.	Resume contents submitted by a candidate, typically name, contact details, employment history and education history.	United States

Website sub-processors — marketing site only

These vendors have no access to any customer's Workzoom application data. They process data about visitors to the workzoom.com marketing website only, and are listed here for transparency under Quebec Law 25 and PIPEDA rather than under the Data Processing Agreement. Categories of data include IP address, browser identifiers, page-view behavior, and any information you voluntarily submit through a form or booking calendar.

Vendor	Purpose	Data categories	Processing location
Amazon Web Services Inc. Privacy policy	Static hosting (S3), edge delivery (CloudFront), and request logs for workzoom.com.	IP address, request URL, user agent, timing.	Canada (Central, ca-central-1) origin; global CloudFront edge locations
Google LLC Privacy policy	Google Tag Manager and Google Analytics 4. Page-view + event analytics.	Truncated IP, pages viewed, events, device, approximate location, randomly-generated client ID.	United States, with regional sub-processors
HubSpot Inc. Privacy policy	Visitor tracking (portal 4666617), form submissions (newsletter, lead magnet, contact), and the meetings booking calendar embedded across the site.	Name, business email, phone, company, IP, page history, cookie identifier, calendar booking details.	United States, with European sub-processors for EU traffic
Microsoft Bing, Yandex LLC, IndexNow consortium	Outbound search-engine indexing notifications. No visitor data is shared.	Published URL paths only.	United States, Russia (Yandex), consortium endpoints

Change notifications

Workzoom notifies active customers at least 30 days before adding or replacing any sub-processor that handles application data. Notifications are sent to the primary administrator email on the customer account. Customers who object to a new sub-processor may terminate the affected service in accordance with the Terms of Service.

Quebec Law 25 + PIPEDA disclosure

This list satisfies the third-party transparency obligation under Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and the openness principle under PIPEDA. Workzoom is incorporated in Ontario, Canada. Personal information held in the application is hosted in AWS Canada (Central) for Canadian customers. The one exception is candidate resume parsing, which transfers resume contents to HireAbility.com LLC in the United States when the recruiting module is in use, and which can be disabled on request. Marketing-website analytics data is processed in the United States by the vendors listed above under Standard Contractual Clauses or equivalent transfer mechanisms.

To exercise your rights of access, rectification, deletion, portability, or to file a complaint regarding our handling of your personal information, contact info@workzoom.com. Quebec residents may also contact the Commission d'accès à l'information du Québec.

Recent changes

Contact

Workzoom's Privacy Officer is Matthew Woolley, reachable at info@workzoom.com. The Privacy Officer is responsible for compliance with this policy and with applicable privacy laws, including Quebec Law 25's designated-person obligation under section 3.1.

Questions about this list, requests for a copy of the Data Processing Agreement, or notification subscription requests can be sent to the same address.