Sub-processors

Data centers

NamePurposeAdditional information
OVH-Cloud (Gravelines, France)The OVH data center hosts the WorkAdventure Platform, Website (this website), the meeting rooms (Jitsi) and all the data we gather for regular business operation (user accounts, list of members, analytics, etc…)ISO 27001 / 27017 SOC 1 CSA More details
AWS (Dublin, Ireland)The Amazon Web Services data center hosts the TURN servers. No data is stored in the AWS data center. Data is only processed “in-transit”ISO 27001 More details

WorkAdventure Website

NamePurposeAdditional information
PipedriveWe use Pipedrive as our Customer Relationship Management. Pipedrive is GDPR compliant.More details
MailjetWe use Mailjet as our email processing service. Mailjet is GDPR compliant.More details
Google Tag ManagerWe use Google Tag Manager in our website. This service allows website tags to be managed via an interface. The Google Tag Manager only implements tags. No cookies are installed and no personal information is collected. The Google Tag Manager triggers other tags that may collect data. The Google Tag Manager does not access this data. If a deactivation has been made at the domain or cookie level, it remains valid for all tracking tags if they are implemented with Google Tag Manager.More details
CMP SirdataWe use Sirdata as our Consent Management Platform. Sirdata is GDPR compliant. It allows users to opt-in or out of data collection via cookie consent.More details
Google Advertising ProductsWe use Google Ads as a marketing tool to promote our products and services.More details
FacebookWe use Facebook Ads as a marketing tool to promote our products and services.More details
LinkedIn Ireland Unlimited CompanyWe use LinkedIn Ads as a marketing tool to promote our products and services.More details
YouTubeWe redirect users to our YouTube channel for tutorials and product promotions’ purposes.More details

WorkAdventure Administration dashboard

NamePurposeCertifications
MailjetWe use Mailjet to send e-mails. E-mails are mostly sent to administrators and organizations, with the notable exception of the “forgot your password” emails that can be sent to any user. The primary information Mailjet has access to is the email addresses of recipients of the emails and the content of the emails themselves.More details
StripeWe use Stripe to process one-time and recurring payments.PCI Service Provider Level 1
SentryWe use Sentry for error tracking, crash reporting, and application monitoring. Sentry acts as a data processor, with a GDPR-compliant Data Processing Addendum (DPA) and the option to host data within the European Union. In addition, Sentry is self-certified under the EU-US Data Privacy Framework, ensuring compliant international data transfers.Data Processing Addendum

WorkAdventure Platform

NamePurposeCertifications
LiveKitWe use LiveKit Cloud to stream a part of our real-time video and audio communications.Data Processing Agreement
OpenAIIf (and only if) you enable OpenAI bots, we use OpenAI APIs to respond to your text or audio queries.Data Processing Agreement
SentryWe use Sentry for error tracking, crash reporting, and application monitoring. Sentry acts as a data processor, with a GDPR-compliant Data Processing Addendum (DPA) and the option to host data within the European Union. In addition, Sentry is self-certified under the EU-US Data Privacy Framework, ensuring compliant international data transfers.Data Processing Addendum