Sign inGet started

Subprocessors

Workover uses the third parties below to run the product. They process customer data on our behalf and under our instructions. The last group is different: those are services you connect yourself, and Workover only reaches them because you asked it to.

Infrastructure

Where the product runs and where your files are kept.

  • Amazon Web Services

    Our infrastructure provider. Runs the product and stores uploaded images and files, including document media and workspace icons.

  • Cloudflare

    Serves and protects the site as a CDN and DNS provider; traffic passes through it.

Running the service

Billing, email, support, notifications, and keeping the thing up.

  • Stripe

    Takes payments and holds billing details. Workover never stores card numbers.

  • Postmark

    Sends transactional email: invitations, password resets, notifications.

  • Plain

    Runs customer support, so anything you send us in a support conversation reaches it.

  • Better Stack

    Monitors uptime, collects operational logs, and receives application errors, which can include the URL and account id involved. The error reporting uses the Sentry SDK, but the data goes to Better Stack, not to Sentry.

  • Kit

    Sends marketing email to people who ask for it, and holds those subscriptions.

  • Expo

    Delivers push notifications to the mobile apps, and holds the device token each one registers.

  • Apple

    Delivers those push notifications to iOS devices, and distributes the iOS app.

  • Google

    Delivers push notifications to Android devices, and provides the site analytics that run only if you accept analytics cookies.

Services you connect

Reached only for workspaces that have connected them, using credentials you provide. For the AI providers that means your own API key: no key, no drafting, and the key stays yours.

  • Anthropic (Anthropic, PBC)

    Drafts and revises documents, runs AI checks, and grounds drafts in the repositories and docs you connect, if you add an Anthropic key. Receives the document content involved. Location: United States.

  • OpenAI (OpenAI OpCo, LLC)

    The same drafting, revision and AI-check features, if you add an OpenAI key. Receives the document content involved. Location: United States.

  • OpenRouter

    Routes drafting requests on to whichever model you select, if you add an OpenRouter key, so your content passes through it as well as reaching the model provider behind it. Location: United States.

  • Z.ai

    The same drafting and revision features, if you add a Z.ai key. Receives the document content involved. Operated from China, so consider this one carefully if your content is subject to EEA or UK transfer rules.

  • Google

    Signs you in if you choose Google, and reads Search Console and Analytics for the sites you connect.

  • GitHub

    Reads the repositories you connect, so drafts can be grounded in your own docs.

  • WordPress sites you connect

    Receives the content you publish, using credentials you supply.

  • Webflow

    Receives the content you publish to a connected Webflow site.

  • Slack

    Delivers notifications to the workspace you connect.

Questions about this list, or about how we handle data, go to our contact page. Our privacy policy covers what we collect and why.