Directory › Workflow automation › Workato
Is Workato UK GDPR compliant?
In plain English
Workato opened a UK data centre in September 2026, alongside its EU one, with AI by Workato and Agent Studio available there. It holds SOC 2 Type II and ISO 27001, 27701 and 42001, and its DPA applies the UK Addendum. Self-service plans (Free, Pro, Developer sandbox) cannot choose a region.
The facts, with sources
| Field | What the vendor publishes | Source |
|---|---|---|
| UK/EU data residency | UK region available UK data centre generally available at app.uk.workato.com (Sept 2026), plus an EU data centre. | www.workato.com/product-hub/changelog/uk-data-center-general… |
| DPA and UK GDPR transfer terms | Yes, UK Addendum/IDTA Where UK GDPR applies, the ICO International Data Transfer Addendum (B1.0) is used. | assets.ctfassets.net/khy5qy7zbpmq/799lRGHEg0bn3PxYylxTEq/b26… |
| SOC 2 | Yes SOC 1 Type II, SOC 2 Type II and SOC 3. | docs.workato.com/en/security/security-compliance.html |
| ISO 27001 | Yes ISO 27001, 27701 and 42001. | docs.workato.com/en/security/security-compliance.html |
| Self-hostable | Not published No self-hosted edition documented. | docs.workato.com/en/datacenter/datacenter-overview.html |
| Sub-processor list | Public Sub-processor PDF (v2026-07-01). View list | assets.ctfassets.net/khy5qy7zbpmq/60pTvb61pANfi1kCs0fCga/143… |
| AI model providers | Anthropic, OpenAI, Azure OpenAI, AWS Bedrock, Google Gemini AI by Workato uses Anthropic and OpenAI models; other providers per the sub-processor list for opt-in AI features. | docs.workato.com/en/connectors/ai-by-workato.html |
| Customer data used for training? | No 'AI by Workato doesn't use user data for training purposes.' | docs.workato.com/en/connectors/ai-by-workato.html |
Questions UK buyers ask
Is Workato UK GDPR compliant?
No tool is UK GDPR compliant on its own. It depends on how you use it. On the vendor's side, Workato offers UK data residency; its DPA status is "Yes, UK Addendum/IDTA"; SOC 2: Yes; ISO 27001: Yes. AgentSafe UK readiness score: 90/100 (Strong).
Does Workato store data in the UK?
UK data centre generally available at app.uk.workato.com (Sept 2026), plus an EU data centre.
Does Workato use my data to train AI models?
'AI by Workato doesn't use user data for training purposes.'
Not legal advice. AgentSafe UK summarises what vendors publish about themselves. It is not legal advice and is not a statement that any tool is "compliant": UK GDPR compliance depends on how you use a tool. Always check the linked sources and take professional advice for your situation.