Workbench CRM LLC ("Workbench") uses the third-party service providers listed below to deliver the Workbench platform. Each provider processes data only as needed to perform its function and is bound by a written agreement covering confidentiality and data protection.
Last updated: August 19, 2026. Maintained by Workbench engineering.
We will update this page when we add or replace a subprocessor. Customers with a Data Processing Agreement in place can object to a new subprocessor as described in the DPA.
Infrastructure and data storage
| Vendor | Purpose | Data involved |
|---|
| Supabase | Primary database, authentication, and file storage | All customer and end-client records stored in Workbench (accounts, contacts, invoices, quotes, jobs, messages, uploaded files and photos) |
| Fly.io | Application hosting and compute | All data processed by the application while serving requests |
| Cloudflare | Domain registration and DNS for customer websites built with the website builder | Domain registrant contact details, DNS configuration |
Payments and financial data
| Vendor | Purpose | Data involved |
|---|
| Stripe | Payment processing, subscription billing, invoice payments | Names, email addresses, billing details, payment card data (card data is handled by Stripe and never stored by Workbench) |
| Plaid | Bank account connections and transaction import for expense tracking | Bank account identifiers, transaction history for connected accounts |
| Intuit (QuickBooks) | Accounting sync, where a customer connects QuickBooks | Clients, invoices, payments, and related accounting records the customer chooses to sync |
| Xero | Accounting sync, where a customer connects Xero | Clients, invoices, payments, and related accounting records the customer chooses to sync |
Communications
| Vendor | Purpose | Data involved |
|---|
| Twilio | Phone numbers, SMS, and voice calling (including AI receptionist and outbound calls) | Phone numbers, call recordings and transcripts, SMS message content |
| Resend | Transactional and marketing email delivery | Recipient names and email addresses, email content |
| LiveKit | Real-time audio and video for team meetings and calls | Meeting audio and video streams, participant names |
AI processing
| Vendor | Purpose | Data involved |
|---|
| Google (Gemini API) | AI features such as content generation, analysis, and assistant responses | Text and context submitted to AI features, which may include customer and end-client records |
| OpenAI | Transcription of voice messages (Whisper API) | Voice message audio and resulting transcripts |
| People Data Labs | Optional contact and company enrichment | Business contact details (name, email, company) submitted for enrichment |
Maps and monitoring
| Vendor | Purpose | Data involved |
|---|
| Google Maps Platform | Maps display and address geocoding | Addresses entered for jobs, clients, and bookings |
| Mapbox | Maps display and address geocoding | Addresses entered for jobs, clients, and bookings |
| Sentry | Application error monitoring | Technical error data (stack traces, browser and device metadata); text and inputs are masked in any session replay |
Questions about this list can be sent to privacy@tryworkbench.app.