Sub-Processors

Workato, Inc. (“Workato”) uses certain sub-processors to assist it in providing the Workato Platform and the Services as described in the Terms of Service and/or the applicable Order form.

What is a Sub-processor

In GDPR terminology, Workato is a Processor of Personal Data submitted by users of its Services for processing on the Workato Platform. Workato may in turn delegate some aspects of processing to another Processor, either an Affiliate or a third party: this is termed a sub-processor. A sub-processor is a data processor engaged by Workato which has or potentially will have access to such Personal Data. Workato engages different types of sub-processors to perform various functions as explained in the table below. Third parties used to provide the Services but which do not have access to or process such Personal Data are not considered sub-processors.

Due Diligence

Workato undertakes to use a commercially reasonable selection process by which it evaluates the security, privacy and confidentiality practices of proposed sub-processors that will or may have access to or process Personal Data. Workato has also executed a Data Processing Addendum with each sub-processor, committing it to processing according to GDPR and other applicable privacy laws and regulations.

List of Sub-processors

Workato Affiliates (including Workato Europe SA (Barcelona), as well as other Affiliates to be appointed from time to time) may act as sub-processors for Personal Data submitted by users for processing on the Workato Platform.

In addition, Workato uses certain unaffiliated third parties to perform specific processing functions related to its Services. These unaffiliated third-party providers are the Sub-processors set forth below.