Our architecture is built on Zero Trust principles and defense-in-depth strategies, with protections at every layer. Every workflow and agent action is authenticated, authorized, and auditable to keep your operations running without interruption.
Explore our security posture below.
View more
View more
View more
View more
All Documents
Documents
Advisories
Attestations
Certificates
General
Security
All Documents
Advisory 2026: Aqua Security's Trivy Supply Chain Attack.pdf
Updated 2026-04-01
Advisory 2026: Axios NPM Distribution Supply Chain Attack.pdf
Updated 2026-04-01
Advisory 2026: Checkmarx KICS Impacted by Supply Chain Compromise.pdf
Updated 2026-04-24
Advisory 2026: litellm Supply Chain Attack.pdf
Updated 2026-04-01
Advisory 2026: OX Security MCP Protocol Vulnerability Disclosure – STDIO Remote Code Execution .pdf
Updated 2026-04-30
Advisory 2026: Telnyx PyPI Distribution Supply Chain Attack.pdf
Updated 2026-04-01
Advisory 2026: Vercel Security Incident Following Compromise of Context.ai.pdf
Updated 2026-04-28
Workato 2025 ISO 27701:2019 Certificate.pdf
Updated 2025-11-24
Workato 2025 VPAT- WCAG .pdf
Updated 2025-11-24
Workato 2025 SOC 1 Type 2 Report.pdf
Updated 2026-02-13
1-10 of 27
Categories
All Documents
Documents
Advisories
Attestations
Certificates
General
Security
Filter by:
All
processor | usage | location | |
|---|---|---|---|
Amazon Web Services Inc. | Cloud infrastructure https://aws.amazon.com/ | United States, Germany, Singapore, Japan, or Australia (at customer's option) | |
Intercom Inc. | Online chat https://www.intercom.com/ | United States | |
Stripe Inc. | Payment processing (only for payment made by credit card) https://stripe.com/ | United States | |
MessageBird USA Inc. d/b/a SparkPost | Provision of email services to customers. Only applicable for customers using “Email by Workato”. The processing for Workato EU data center customers will be under SparkPost EU. https://messagebird.com/ | United States (for SparkPost) European Union (for SparkPost EU) | |
| View more | |||