Workshop Software

Documents on the trust centre

What the vendor lists, typed; public items can be read now, the rest are available on request.

What the vendor says

Answers the vendor publishes to questions buyers ask, quoted with the link to where it says so.

• Where data is hosted or processed

  Where is Workshop data hosted?

  “Workshop data is securely hosted on AWS, with customers able to choose from two available regions for data residency: United States (US-East-1) or Germany (EU-Central-1). This flexibility allows organizations to meet regional compliance requirements and align with internal data governance policies.”

  Regions named: EU, US, Germanyas of 21 Sep 2026Source

• Where data is hosted or processed

  Can I choose my data residency region with Workshop?

  “Where your data lives matters — especially when your organization has strict regulatory or compliance requirements. Workshop gives you full control over where your data is stored from the day you sign up. We offer U.S. or EU data centers, ensuring your internal communications meet organizational standards and requirements right out of the gate.”

  Regions named: EUas of 21 Sep 2026Source

• Use of customer data to train models

  Is customer data used to train Workshop’s AI models?

  “No. Workshop does not use customer data to train or fine-tune any AI models. Workshop utilizes business accounts and agreements with all model providers and enforces strict data retention controls on all model providers. AI inference requests may be processed in any region globally, including outside the EEA, with all cross-border transfers governed by appropriate safeguards including Google's EU-U.S. Data Privacy...”

  as of 21 Sep 2026Source

• Data retention and deletion

  What data retention policies apply to AI-generated or processed data?

  “Workshop utilizes business accounts and agreements with all model providers and enforces zero data retention on all model providers, with the exception of Google, who retains prompts and responses for up to 55 days solely for the purpose of detecting policy and prohibited use violations. No provider uses customer data for model training, enrichment, or any purpose beyond delivering the requested AI functionality....”

  as of 21 Sep 2026Source