Vendor registry · HR
Workday: DPA, subprocessors and transfers
Last checked 16 September 2026. Changes to this record are tracked.
- Contracting legal entity
- Workday Limited
- Country of registration
- Ireland
- Transfer mechanism
- Standard contractual clauses (SCC)
Contract terms adopted by the European Commission that the vendor signs to protect personal data transferred outside the EEA. Usually part of the vendor's DPA.
- Data processing agreement
- https://www.workday.com/content/dam/web/en-us/documents/legal/umsa-universal-data-processing-exhibit-limited.pdf
- Subprocessor list
- https://www.workday.com/en-us/legal/subprocessors.html
- Security or trust page
- https://www.workday.com/en-us/why-workday/trust.html
- Data regions
- EEA, UK, US, CA, AU, SG
What to put in your subprocessor list
A ready row. Replace the purpose with what your client actually uses Workday for.
| Subprocessor | Legal entity | Country | Purpose | Transfer | DPA |
|---|---|---|---|---|---|
| Workday | Workday Limited | IE | HR | SCC | https://www.workday.com/content/dam/web/en-us/documents/legal/umsa-universal-data-processing-exhibit-limited.pdf |