Sub-Processors
AtWorkStudio S.r.l., acting as Data Processor on behalf of its Clients, may engage sub-processors pursuant to Art. 28(2) of Regulation (EU) 2016/679 for the provision of the contractually agreed services.
List of sub-processors
The following list contains the main sub-processors engaged by AtWorkStudio S.r.l. for the provision of its services. For each provider, the type of service is indicated and, where applicable, the possible location or transfer of data.
Cloud password management service (vault) for the custody of credentials used in the provision of services
EU
Cloud backup and cyber protection service (Acronis Cyber Protect Cloud) used for the provision of managed backup services
EU
Infrastructure/hosting services and related services (where applicable)
EU
Microsoft CSP Indirect Provider for the supply of Azure and Microsoft 365 subscriptions, with delegated administrative roles (Global Administrator on provided Azure tenants, GDAP for Microsoft 365)
EU
IT services and/or specialist support (where applicable)
EU
Electronic signature platform for the signing and management of contractual documents
EU
Cloud platform for source code hosting, CI/CD automation and project management used for the development and provision of services
EU
Cloud email security and archiving services (Email Security Gateway, Email Archiver) for message scanning, filtering and retention
EU
Cloud services (Microsoft 365 and Azure) for hosting, infrastructure and productivity used in the provision of services
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (e.g. DPF/SCCs)
Domain registration and management, DNS
EU
Supply/support for IT components and services (where applicable)
EU
Remote access and support tool on client systems for technical assistance activities
EU
Cloud hosting/IaaS services (virtual servers) for the provision of infrastructure services
EU
Ticketing/help desk platform and customer support
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (e.g. DPF/SCCs)
List version: 2026.04 · Last updated: 25/04/2026