SUB-PROCESSORS
The companies we work with to run Workunit.
Last updated: March 1, 2026
This page lists the third-party service providers (sub-processors) that process personal data on behalf of Workunit. Each has a Data Processing Agreement in place.
| Sub-processor | Purpose | Data Processed | Location | DPA |
|---|---|---|---|---|
| Scaleway | Cloud hosting, Key Manager | All application data | EU (Paris, France) | Yes |
| Cloudflare | CDN, R2 storage, Turnstile CAPTCHA, Web Analytics | HTTP requests, attachments, CAPTCHA tokens, anonymous page metrics (no cookies, no PII) | Global (EU adequate) | Yes |
| Stripe | Payment processing | Billing info, email address | US/EU (DPF + SCCs) | Yes |
| Resend | Transactional email | Email address, display name | US (DPF + SCCs) | Yes |
Transfer Safeguards
For US-based processors, we rely on the EU-US Data Privacy Framework (DPF) and Standard Contractual Clauses (SCCs) as approved by the European Commission. Primary application data is hosted in the EU on Scaleway infrastructure in Paris, France.