WorkOS: Trust page changed
WorkOS updated its Data Security Incident notice, stating it identified the source of unauthorized access to an internal tool used by sales and customer-facing teams and confirmed the affected data was deleted. The notice links to an updated security bulletin for findings, root cause, and security improvements; incident timing and impact level are not shown.
Machine-written from the diff below (Sol; type: incident edit). Check the diff before relying on it.
What changed
Struck in red is what WorkOS removed; blue is what they added. Muted text is unchanged context.
Compared with the previous archived version (#14674 to #17095). Text is normalized before comparing: dates, counters and tokens show as ‹date›, ‹count›, ‹tok›, and noise-only edits are hidden. Rewindex shows changed passages with a few words of context, not a copy of the page. View the live page (opens in new tab).
Archive proof
Rewindex commits each page capture it captures to a daily checkpoint, chains it to the day before, and has the checkpoint timestamped by FreeTSA and DigiCert. That proves this record existed by then and has not been changed since, by anyone, Rewindex included.
How the archive is checked, and what it cannot prove.
Before captured
In the 2026-11-04 checkpoint, timestamped by FreeTSA and DigiCert on . Record hash
63fae9309c24dae1…
Rewindex captured a newer version after the last checkpoint; the next run () commits it.
History of this page
TodaySaturday, November 7Sat, Nov 7
1 page change
- Content changedPage change
Trust pagechangedthis change
WorkOS updated its Data Security Incident notice, stating it identified the source of unauthorized access to an internal tool used by sales and customer-facing teams and confirmed the affected data was deleted. The notice links to an updated security bulletin for findings, root cause, and security improvements; incident timing and impact level are not shown.
Wednesday, November 4
1 page change
- Content changedPage change
Trust pagechanged
WorkOS’s Trust page now lists employee Code of Conduct enforcement, data retention and classification policies, continuity and disaster recovery plans, and development lifecycle controls. Physical access processes and data center access review are no longer shown in this section; these are disclosure changes, not evidence that the underlying controls were discontinued.
Tuesday, November 3
1 page change
- Content changedPage change
Trust pagechanged
WorkOS added a Data Security Incident notice stating it was investigating unauthorized access to an internal tool used by sales and customer-facing teams, with a link to its security bulletin. The investigation was ongoing in the archived notice; no start time, duration, impact level or customer impact was stated.
Monday, November 2
1 page change
- Content changedPage change
Trust pagechanged
WorkOS’s Trust page removed displayed references to several organizational, privacy and continuity controls, and added physical-access and data-center access controls. This changes the public security information customers can review; the diff does not establish whether underlying practices changed.
Cite this
Trust page changed on WorkOS’s Trust page, changed 2026-11-07 08:59 UTC (change 4 of 4).
- Title
- Trust page changed
- Vendor
- WorkOS
- Date
- URL
- https://rewindex.com/change/p17095