Sub-Processors
AtWorkStudio S.r.l., acting as Data Processor on behalf of its Clients, may engage sub-processors pursuant to Art. 28(2) of Regulation (EU) 2016/679 for the provision of the contractually agreed services.
List of sub-processors
The following list contains the main sub-processors engaged by AtWorkStudio S.r.l. for the provision of its services. For each provider, the type of service is indicated and, where applicable, the possible location or transfer of data.
Cloud password management service (vault) for the custody of credentials used in the provision of services
EU
Cloud backup and cyber protection service (Acronis Cyber Protect Cloud) used for the provision of managed backup services
EU
Generative artificial intelligence services (Claude models) used in analysis, automation and support activities in the provision of services, with possible processing of data provided by the Client. Data is not used for model training, in accordance with the provider’s commercial terms.
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (Standard Contractual Clauses - SCCs)
Infrastructure/hosting services and related services (where applicable)
EU
Microsoft CSP Indirect Provider for the supply of Azure and Microsoft 365 subscriptions, with delegated administrative roles (Global Administrator on provided Azure tenants, GDAP for Microsoft 365)
EU
Automatic speech transcription service for incoming telephone calls handled by the voice assistant. The transmission of data for model training is disabled.
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (Standard Contractual Clauses - SCCs)
IT services and/or specialist support (where applicable)
EU
Electronic signature platform for the signing and management of contractual documents
EU
Cloud email security and archiving services (Email Security Gateway, Email Archiver) for message scanning, filtering and retention
EU
Cloud services (Microsoft 365 and Azure) for hosting, infrastructure and productivity used in the provision of services
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (e.g. DPF/SCCs)
Domain registration and management, DNS
EU
Supply/support for IT components and services (where applicable)
EU
Remote access and support tool on client systems for technical assistance activities
EU
Orchestration platform for the artificial-intelligence voice assistant handling incoming calls to the company telephone number
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (Standard Contractual Clauses - SCCs)
Cloud hosting/IaaS services (virtual servers) for the provision of infrastructure services
EU
Ticketing/help desk platform and customer support
Possible transfers to third countries (e.g. USA) in compliance with Articles 44 et seq. GDPR (e.g. DPF/SCCs)
Telephony operator
The geographic number used for incoming calls and the related VoIP telephony services are provided by Messagenet S.p.A. (Milan, Italy). As a provider of electronic communications services, Messagenet processes telephone traffic data — calling number, duration and routing — as an independent controller, in fulfilment of its own legal obligations, and not as a sub-processor on behalf of AtWorkStudio S.r.l. It is listed in this separate section precisely because its role is not that of a sub-processor under Article 28 GDPR.
List version: 2026.08 · Last updated: 21/08/2026