Sub-processors

Who are your sub-processors?

In short

Microsoft Azure for hosting and models, WorkOS for sign-in, PostHog for website analytics. Connected tools are processed at your instruction, not as sub-processors.

Last updated September 27, 2026
Sub-processor Purpose Location
Microsoft Azure Hosting, databases, storage, language model inference (Azure OpenAI, Azure AI Foundry) United States, or EU on request
WorkOS Single sign-on and directory sync United States
PostHog Analytics on 20xwork.ai and in-product usage events (no task text, no record contents) United States, or EU on request

Tools your organisation connects (for example Salesforce, Microsoft 365, Slack, SAP Signavio) are not sub-processors. We access them at your instruction, with credentials you grant, and you can revoke that access at any time.

We give 30 days' notice of any new sub-processor by email to the account owner, and customers may object in that window. The current list is also available as a signed PDF on request from adharsh@20xwork.ai.

Have a questionnaire to fill in?

Send us your SIG, CAIQ or your own template and we will return it completed, with our penetration test summary and policies under NDA.

Email adharsh@20xwork.ai
Last updated September 27, 2026.The commitments on these pages are incorporated into our commercial agreements and Data Processing Addendum.