Trust Center
Security, privacy, compliance, and trust resources for Workplace.io.
Security Program
How we protect customer data and operate our security controls.
Security Overview
Overview of our security program, internal controls, and how we safeguard customer data.
Architecture & Data Flow
A clear view of how data moves through Workplace.io, what we store, and where processing occurs.
Encryption
How we encrypt data in transit and at rest, and how encryption keys are managed and protected.
Access Controls
How we enforce least privilege, role-based access, and administrative controls across the platform.
Logging & Monitoring
How we log security-relevant events and monitor systems to detect and investigate suspicious activity.
Secure Development
How we build and ship software securely, including reviews, testing, change control, and dependency management.
Incident & Resilience
How we respond to incidents and operate reliably.
Incident Response
How we detect, triage, contain, remediate, and communicate security incidents.
Vulnerability Disclosure
How to report security vulnerabilities to us and what our response and remediation process looks like.
Continuity & Disaster Recovery
How we handle backups, disaster recovery, and continuity planning to support reliable operations.
Availability & Uptime
How we design for availability and monitor service health, performance, and operational stability.
Privacy & Data Protection
How we handle personal data, retention, and customer requests.
Data Handling & Retention
What data we collect, how it’s used, how long it’s retained, and how deletion works.
Subprocessors
A current list of subprocessors we use, what they do, and how we evaluate and manage vendor risk.
Data Processing Addendum
Our DPA describing how we process customer data, security measures, and contractual privacy commitments.
GDPR & Data Rights
How we support GDPR-aligned rights requests, customer responsibilities, and privacy-by-design practices.
International Transfers (SCCs)
How we address cross-border data transfers and provide appropriate transfer mechanisms where applicable.
AI & Culture Scoring
How AI is used and how we reduce risk of misuse or surveillance.
AI Use Policy
How AI supports culture insights, including data minimization, safeguards, and customer controls.
Model Governance
How we evaluate model quality, manage changes, and maintain consistency of scoring and outputs over time.
Acceptable Use (Culture Insights)
How Workplace.io is intended to be used, and the uses we prohibit to prevent surveillance or misuse.
Aggregation & Anonymity
How insights are aggregated and protected to reduce the risk of identifying individuals from results.
Compliance & Assurance
Assurance roadmap and progress toward formal attestations.
Vendor Risk & Questionnaires
Materials procurement and security teams often request.
Security Whitepaper
A detailed security overview for customer reviews, including architecture, controls, and operational practices.
CSA CAIQ
Our responses to the CSA CAIQ to support vendor security assessments and procurement reviews.
Security Questionnaire
How to submit a security questionnaire and what information we provide during due diligence.
Legal
Policies governing use of the product and data processing.
Terms of Service
The terms that govern use of Workplace.io, including account responsibilities and acceptable use.
Partner Program Terms of Service
The terms that govern use of Workplace.io Partner Program, including account responsibilities and acceptable use.
Privacy Policy
How we collect, use, share, and protect personal data, including user rights and choices.
Cookie Policy
How we use cookies and similar technologies, and how users can manage preferences.
Contact
How to reach us for security, privacy, and compliance requests.