Work 365 Sub-Processors
This page describes third parties engaged by Work 365 that may process Customer Data in connection with the Services, as further described in the Work 365 Data Processing Agreement. The countries from which Sub-Processors process data are described in their respective privacy and security documentation.
Not all third parties listed below act as Sub-Processors in the sense of Article 28 GDPR. Some process data at the Customer’s direction or act as independent controllers, as described below.
For the purposes of this document, “Customer Data” includes Personal Data as defined in the Work 365 Data Processing Agreement.
Infrastructure Sub-Processors
Work 365 is built on the infrastructure provided by the following Sub-Processors. Depending on the Services used, these Sub-Processors may process Customer Data on behalf of Work 365 solely to the extent necessary to provide their respective services.
- Microsoft Dynamics / Power Platform
Work 365 is built on Microsoft Dynamics Sales App (DV version) or the Microsoft Power platform (PV version). Work 365 processes Customer Data within the customer’s own Microsoft Dataverse environment, which remains under the Customer’s control. - Microsoft Azure
The backend infrastructure for Work 365 is hosted on the Microsoft Azure platform. - Cloudflare
Cloudflare provides content delivery, DDoS mitigation, DNS & WAF services. - Twilio
Twilio SendGrid is used as our email messaging platform. - Elastic
Elastic provides log aggregation and observability services.
Feature Specific Sub-Processors
Some features in Work 365 require the use of additional Sub-Processors. The following Sub-Processors are engaged only where the relevant feature or integration is enabled by the Customer and process data under the Customer’s control or as independent controllers, where applicable.
Provider Integrations
Providers in the context of Work 365 are entities from which you purchase services. This integration allows Work 365 to place orders and sync data from the providers to provide an end-to-end purchase and billing workflow. The following providers are available in Work 365.
- Microsoft Partner Center
- Ingram Micro
- TD Synnex
- Crayon
- Pax8
Accounting Integrations
Invoices generated from Work 365 (and related data) can be synced into an accounting / general ledger system. The following accounting system integrations are available in Work 365.
- Intuit (QuickBooks Online / QuickBooks Desktop)
- Microsoft (Dynamics Business Central)
- Oracle NetSuite
- MyOB
Payment Processors
You may use a payment processor to charge a customer invoice from Work 365. The following payment processor integrations are available in Work 365. Note that payment instrument details (credit card numbers, bank account details) are not stored within Work 365; these are handled directly by the payment processor and only the processor-specific instrument reference is stored in Work 365. Payment processors typically act as independent controllers with respect to payment instrument data processed directly by them.
- Authorize.Net
- Stripe
- GoCardless
- Paya
- TapPay
Taxation Services
Taxation Services provide automatic tax calculations for invoices. The following tax services are available in Work 365.
- Avalara
PSA Systems
Work 365 can sync data to PSA (Professional Service Automation) systems, allowing partners to consolidate their service and product billing into one platform. The following PSA integrations are available in Work 365.
- ConnectWise
- Datto Autotask
Updates to the Sub-Processor Page
Due to the nature of our business and ongoing product development, our Sub-Processors may change from time to time. For example, we may deprecate a Sub-Processor to consolidate and minimize our use of Sub-Processors, or we may add a Sub-Processor if we believe that doing so will enhance our ability to deliver the Services.
You may subscribe to receive notifications by email if we update this page to add or replace any Sub-Processors, if any of our Sub-Processors materially change the services that they provide. To subscribe to the notification please complete the form available at
If you opt-in to receive a notification, we will notify you in accordance with the notice provisions set out in the DPA.
Customers may object to changes to Sub-Processors in accordance with the objection rights set out in the Work 365 Data Processing Agreement. For more information on IOTAP’s privacy practices, please visit our Privacy Policy.