Sub-processors
- Last updated:
- Effective:
Atlas Task Manager engages the third-party sub-processors listed below to deliver the Service. Each sub-processor is bound by a written data processing agreement consistent with Art. 28 GDPR.
1. Overview
We engage sub-processors only to the extent necessary to deliver the Service and to comply with law. Each is required to implement appropriate technical and organizational measures, process customer data only on documented instructions, and maintain confidentiality.
2. Current sub-processors
Optional integration sub-processors process customer data only when a workspace admin enables the relevant integration.
| Vendor | Purpose | Data categories | Location | Transfer mechanism |
|---|---|---|---|---|
| Railway Corp. | Application hosting, managed database, deployment infrastructure. | Account data, workspace content, authentication metadata, operational logs. | United States and selected infrastructure regions. | SCCs and Railway data processing terms. |
| Google LLC | OAuth sign-in and Google Calendar integration. | Profile, email, calendar events you elect to sync. | United States and global. | SCCs + EU-US DPF (certified). |
| Microsoft Corporation | OAuth sign-in and Microsoft 365 Calendar integration. | Profile, email, calendar events you elect to sync. | United States and global. | SCCs + EU-US DPF (certified). |
| GitHub, Inc. | OAuth sign-in and repository integrations when enabled by a workspace. | Profile, email, repository metadata you elect to connect. | United States. | SCCs (via Microsoft). |
| Slack Technologies, LLC | Slack workspace messaging integration when enabled by a workspace. | Workspace identifiers, channel metadata, messages you elect to sync. | United States and global. | SCCs + applicable Salesforce data processing terms. |
3. Notice of changes
We update this list when we add, change, or remove a sub-processor. Subscribe to change notifications at https://atlas.wrxstack.com/legal/sub-processors. Customers with a signed DPA will receive advance notice as specified in that DPA, with a right to object within the period stated there.
4. Data processing agreement
To request a signed Data Processing Agreement (DPA) incorporating the Standard Contractual Clauses and UK IDTA Addendum, visit https://atlas.wrxstack.com/legal/dpa-request or email legal@wrxstack.com. See our Privacy Policy for how we handle personal data overall.