Enterprise Security
& Compliance Pack
Document index for procurement and vendor risk teams. Full markdown/PDF exports are maintained internally; contact us for a complete pack tailored to your questionnaire.
Document index
Request copies via email where no public page is linked
Security white paper
Architecture, tenant isolation, encryption, and operational controls.
Request copyPosition paper: Agent Pipelines
Control and predictability in an agent-driven SDLC — what stays of CI/CD, what moves to the artefact, and the evidence model an enterprise expects.
Request copyDPA template
UK GDPR Article 28 data processing agreement (draft — legal review pending).
Request copyMaster Service Agreement
Enterprise MSA skeleton — incorporates DPA and SLA by reference.
Request copySub-processors (summary)
Infrastructure and operational sub-processors always engaged. Enterprise customers receive 30 days' notice before material changes.
| Sub-processor | Service | Location |
|---|---|---|
| Amazon Web Services (AWS) | Cloud hosting | eu-west-1 (Ireland) |
| Amazon Cognito | Identity & authentication | eu-west-1 |
| Amazon DynamoDB | Database | eu-west-1 |
| GitHub, Inc. | Source control & CI/CD | United States (SCCs) |
Customer-configured integrations (Jira, AI providers) are optional and controlled by each workspace. Keys are encrypted with a dedicated AWS KMS key and stored server-side — never in the browser.
Need the full pack?
Email enterprise@productivityworkbench.com with your questionnaire template and deadline. We aim to respond within one business day with the white paper and sub-processor list.