Legal
Sub-processors
In effect from —
These are the providers we use to run WorkPilot. Each is bound by a data processing agreement, and we remain responsible to you for what they do.
Before we add or replace one, account holders get at least thirty days' notice by email, as our Data Processing Agreement sets out.
| Provider | What it does | Where | Transfer basis |
|---|---|---|---|
| Google Ireland Limited (Firebase / Google Cloud) | Application hosting, database, file storage, authentication | Zurich, Switzerland (europe-west6) | EU controller; Switzerland covered by an adequacy decision |
| Stripe Payments Europe, Ltd. | Subscription billing and payment processing | Ireland, with transfers to the United States | EU-US Data Privacy Framework and standard contractual clauses |
| Sendinblue SAS (Brevo) | Transactional email — invitations, reminders, receipts | France | EU controller |
| Google Ireland Limited (Gemini API) | Generates the written workforce insights shown in the dashboard | European Union | EU controller; prompts are not used to train models |
Being told about changes
Notice goes to the owner of each company by email. To have it sent somewhere else as well — a compliance mailbox, for instance — write to privacy@wrkpilot.com.