Security and compliance
Sub-processors
Beyond Work uses the third parties below to deliver our services. Each has a data processing agreement with us and processes personal data only on our instructions.
We notify customers of additions or changes before the new sub-processor begins processing. To receive those notices, email privacy@beyondwork.ai.
Core services
| Vendor | Purpose | Hosting region | Contracting entity and country | Additional information |
|---|---|---|---|---|
| Amazon Web Services | Cloud infrastructure and hosting | Frankfurt, Germany | Amazon Web Services, Inc., United States | Trust page |
| Microsoft Azure (Document Intelligence) | Extracts text from documents and PDFs | Frankfurt, Germany | Microsoft Corporation, United States | Trust page |
| Microsoft Azure (OpenAI Service) | EU-hosted language models, the default routing for model calls | Frankfurt, Germany | Microsoft Corporation, United States | Trust page |
| Temporal | Runs workflow execution. Content is encrypted with a tenant-held key before it is transmitted | Frankfurt, Germany | Temporal Technologies Inc., United States | Trust page |
| ClickHouse Cloud | Event log storage, one database per tenant | Frankfurt, Germany | ClickHouse, Inc., United States | Trust page |
| Sentry | Error monitoring | European Union | Functional Software, Inc. d/b/a Sentry, United States | Trust page |
| Mixpanel | Product analytics | European Union | Mixpanel, Inc., United States | Trust page |
| PostHog | Website, RFP microsite, and investor portal analytics | EU Cloud (Frankfurt). Support and PostHog's own sub-processors may process outside the EU | PostHog, Inc., United States | Trust page |
| SolarWinds (Squadcast) | On-call alerting. Processes engineer contact details, not customer data | European Union | SolarWinds Worldwide, LLC, United States | Trust page |
| FusionAuth | Test identity provider offered during onboarding, before a customer's own identity provider is connected | Frankfurt, Germany | Inversoft, LLC d/b/a FusionAuth, United States | Trust page |
| Auth0 | Authentication during demonstration and proof of concept only, before a customer's own identity provider is connected | European Union | Okta, Inc., United States | Trust page |
Model providers, only where a customer enables them
Model calls are routed through EU-hosted infrastructure by default. The providers below are enabled per tenant, at a customer's choice, and process data only for tenants where that choice has been made.
| Vendor | Purpose | Hosting region | Contracting entity and country | Additional information |
|---|---|---|---|---|
| Anthropic | Language model provider | United States, or Frankfurt when routed through AWS | Anthropic, PBC, United States | Trust page |
| OpenAI | Language model provider | United States, or Frankfurt when routed through Azure | OpenAI OpCo, LLC, United States | Trust page |
| Mistral AI | Language model provider | European Union | Mistral AI, SAS, France | Trust page |
Change log
No changes recorded since publication on .