SOC 2 company profile

WorkOS SOC 2 status and provider evidence

Review WorkOS’s public SOC 2 statement, report type, evidence source, and freshness.

SOC 2 statusself attested
Report typeType II
Providers found0
Last checked2026-08-30
Providers

WorkOS’s SOC 2 stack

No provider is named on the current source.

We will update this page if the company publishes more detail.

Compliance coverage

Frameworks named by WorkOS

GDPR

y penetration testsExternal code auditsFrequently asked questionsWhere can I find your compliance resources?All compliance documentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes, WorkOS is GDPR compliant. Reach out to support@workos.com to request deletion of data.Can WorkOS sign a HIPAA BAA?Yes, WorkOS can sign business associate agreements for customers under enterprise plans.What data do you store?The data stored by

Checked 2026-08-30
View source ↗
HIPAA

ocumentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes, WorkOS is GDPR compliant. Reach out to support@workos.com to request deletion of data.Can WorkOS sign a HIPAA BAA?Yes, WorkOS can sign business associate agreements for customers under enterprise plans.What data do you store?The data stored by WorkOS is limited to what is sent from the identity providers. For more information, view our Privacy Policy.Where can I find

Checked 2026-08-30
View source ↗
SOC 2

sSecuritySupport PlansCustomersPricingSign inSign upSecure, out of the boxWe check all the boxes so you can focus on what you do best, building your app and serving your customers.SOC 2 Type 2 certifiedGDPR & CCPA compliantAnnual 3rd-party security penetration testsExternal code auditsFrequently asked questionsWhere can I find your compliance resources?All compliance documentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes

Checked 2026-08-30
View source ↗

Primary compliance evidence

WorkOS public statement

sSecuritySupport PlansCustomersPricingSign inSign upSecure, out of the boxWe check all the boxes so you can focus on what you do best, building your app and serving your customers.SOC 2 Type 2 certifiedGDPR & CCPA compliantAnnual 3rd-party security penetration testsExternal code auditsFrequently asked questionsWhere can I find your compliance resources?All compliance documentation can be found on our Trust Center.Is WorkOS GDPR compliant?Yes, WorkO

Classification: self attested · checked 2026-08-30
Open source ↗
SOC 1SOC 2SOC 3Type IType IIAudit readinessTrust centersVendor riskSecurity evidenceProcurement