Secure, out of the box
We check all the boxes so you can focus on what you do best, building your app and serving your customers.
- SOC 2 Type 2 certified
- GDPR & CCPA compliant
- Annual 3rd-party security penetration tests
- External code audits

Frequently asked questions
All compliance documentation can be found on our Trust Center.
Yes, WorkOS is GDPR compliant. Reach out to support@workos.com to request deletion of data.
Yes, WorkOS can sign business associate agreements for customers under enterprise plans.
The data stored by WorkOS is limited to what is sent from the identity providers. For more information, view our Privacy Policy.
You can navigate to WorkOS Subprocessors to see the most recent list of data subprocessors.
To report security issues, please refer to our Responsible Disclosure page.