DoWork subprocessors
Last updated: October 7, 2026
These are the companies that process personal data for DoWork when we provide the service. Each one is bound by a data protection agreement with terms at least as protective as our Data Processing Agreement. We'll email customers at least 30 days before adding a new subprocessor.
| Subprocessor | What it does for DoWork | Where it processes data | Its data processing terms |
|---|---|---|---|
| Anthropic, PBC | The AI model (Claude) behind DoWork's drafting, analysis and summaries. Anthropic may not train models on our customers' content, and it deletes inputs and outputs within 30 days. | United States | anthropic.com/legal/data-processing-addendum |
| Supabase, Inc. | Database, sign-in and file storage | United States (Oregon) | supabase.com/legal/customer-resources/data-processing-addendum |
| Vercel Inc. | Hosting of the DoWork app and website | United States | vercel.com/legal/dpa |
| Google LLC | Sign-in with Google, and DoWork's own email (support@dowork.io) | United States | workspace.google.com/terms/dpa_terms.html |
| Stripe, LLC | Payments and billing | United States | stripe.com/legal/dpa |
| Resend | Sending DoWork's account emails (sign-in links, password resets) | United States | resend.com/legal/dpa |
Services a customer connects themselves (for example their own Google Workspace, Google Ads, Meta or a CRM) aren't DoWork's subprocessors. They're the customer's own providers, and DoWork reads from them only on the customer's instruction.