Canada
United States
BahamasLegal
Workzoom sub-processor list.
What this list is
Workzoom relies on a small number of vetted service providers to operate the workzoom.com website, to deliver the Workzoom application, and to bill for Workzoom subscriptions. Each provider receives only the data necessary for its function, under written data protection terms at least as strict as those in our Data Processing Agreement. Our billing provider, Stripe, processes billing information under the Stripe Services Agreement and Stripe Data Processing Agreement.
This list is published in full for transparency to data subjects, prospective customers running vendor reviews, and Quebec residents under Law 25. Active customers are notified at least 30 days before we add or replace any sub-processor that handles application data. To subscribe to change notifications, contact info@workzoom.com.
Application sub-processors: customer data
These are the only third parties that process Personal Information held inside the Workzoom application. They are governed by the Workzoom Data Processing Agreement and are the list referenced by Annex 3 of that agreement.
| Vendor | Purpose | Data categories | Processing location |
|---|---|---|---|
| Amazon Web Services Inc. Privacy policy |
Primary cloud hosting for the Workzoom application, database, file storage, and backups. Transactional email delivery through Amazon SES (notifications, workflow and system email). | All Personal Information held in the application, encrypted at rest and in transit. Recipient email address and message content for transactional email. | AWS Canada (Central, ca-central-1) by default; US clients may elect AWS US-region hosting at contract |
| HireAbility.com LLC Privacy policy |
Candidate resume parsing for the recruiting module. Used only when the recruiting module is in use and a resume is uploaded. Can be disabled at customer request, in which case no data is sent to this sub-processor. | Resume contents submitted by a candidate, typically name, contact details, employment history and education history. | United States |
Website sub-processors: marketing site only
These vendors have no access to any customer's Workzoom application data. They process data about visitors to the workzoom.com marketing website only, and are listed here for transparency under Quebec Law 25 and PIPEDA rather than under the Data Processing Agreement. Categories of data include IP address, browser identifiers, page-view behavior, and any information you voluntarily submit through a form or booking calendar.
| Vendor | Purpose | Data categories | Processing location |
|---|---|---|---|
| Amazon Web Services Inc. Privacy policy |
Static hosting (S3), edge delivery (CloudFront), and request logs for workzoom.com. | IP address, request URL, user agent, timing. | Canada (Central, ca-central-1) origin; global CloudFront edge locations |
| Google LLC Privacy policy |
Google Tag Manager and Google Analytics 4. Page-view + event analytics. | Truncated IP, pages viewed, events, device, approximate location, randomly-generated client ID. | United States, with regional sub-processors |
| HubSpot Inc. Privacy policy |
Visitor tracking (portal 4666617), form submissions (newsletter, lead magnet, contact), and the meetings booking calendar embedded across the site. | Name, business email, phone, company, IP, page history, cookie identifier, calendar booking details. | United States, with European sub-processors for EU traffic |
| Microsoft Bing, Yandex LLC, IndexNow consortium | Outbound search-engine indexing notifications. No visitor data is shared. | Published URL paths only. | United States, Russia (Yandex), consortium endpoints |
Billing service provider: Workzoom subscription payments
This vendor has no access to any customer's Workzoom application data. It processes information about the business customers who are billed through Stripe for their subscriptions, so that Workzoom can issue invoices and collect payment. Customers billed directly by Workzoom are not processed by Stripe. It is listed here for transparency under Quebec Law 25 and PIPEDA rather than under the Data Processing Agreement. Stripe is Workzoom's service provider for billing and also acts on its own account for purposes such as fraud prevention and legal compliance, as described in its privacy policy.
| Vendor | Purpose | Data categories | Processing location |
|---|---|---|---|
| Stripe Payments Canada, Ltd. and Stripe, LLC Privacy policy |
Subscription billing, invoices and receipts, automatic collection of subscription payments, and the billing portal where customers update their payment method and download invoices. | Billing contact name, business email and billing address; customer account code; subscription, invoice and payment history. Payment card or bank account details are entered directly with Stripe; Workzoom receives only limited details such as cardholder name, card brand, last four digits and expiry date. Device and connection information used by Stripe for fraud prevention. | United States and other countries where Stripe's affiliates and service providers operate |
Change notifications
Workzoom notifies active customers at least 30 days before adding or replacing any sub-processor that handles application data. Notifications are sent to the primary administrator email on the customer account. Customers who object to a new sub-processor may terminate the affected service in accordance with the Terms of Service.
Quebec Law 25 + PIPEDA disclosure
This list satisfies the third-party transparency obligation under Quebec's Act respecting the protection of personal information in the private sector (as amended by Law 25) and the openness principle under PIPEDA. Workzoom is incorporated in Ontario, Canada. Personal information held in the application is hosted in AWS Canada (Central) for Canadian customers. The one exception is candidate resume parsing, which transfers resume contents to HireAbility.com LLC in the United States when the recruiting module is in use, and which can be disabled on request. Marketing-website analytics data is processed in the United States by the vendors listed above under Standard Contractual Clauses or equivalent transfer mechanisms. Billing and payment information about Workzoom's own customer accounts is processed in the United States, and in other countries where Stripe's affiliates and service providers operate, by Stripe as listed above.
To exercise your rights of access, rectification, deletion, portability, or to file a complaint regarding our handling of your personal information, contact info@workzoom.com. Quebec residents may also contact the Commission d'accès à l'information du Québec.
Recent changes
- Added Stripe Payments Canada, Ltd. and Stripe, LLC as Workzoom's payment service provider for subscription invoicing and payment collection. Stripe processes billing contact and payment information about Workzoom's own customer accounts and has no access to application data.
- Added HireAbility.com LLC (candidate resume parsing), previously listed in Annex 3 of the Data Processing Agreement but omitted from this page.
- Added Amazon SES transactional email to the Amazon Web Services entry.
- Replaced Vercel Inc. with Amazon Web Services for workzoom.com website hosting, following the July 2026 migration to S3 and CloudFront. Vercel no longer processes any Workzoom data.
- Initial published sub-processor list extracted from privacy policy.
Contact
Workzoom's Privacy Officer is Matthew Woolley, reachable at info@workzoom.com. The Privacy Officer is responsible for compliance with this policy and with applicable privacy laws, including Quebec Law 25's designated-person obligation under section 3.1.
Questions about this list, requests for a copy of the Data Processing Agreement, or notification subscription requests can be sent to the same address.