The protection of your personal and business data is our top priority. WrkLst complies with the General Data Protection Regulation (GDPR) and the German Datenschutz-Grundverordnung (DSGVO).
We do not sell your data
WrkLst never sells or shares your personal or business data with third parties for advertising, profiling or any other commercial purpose. Your data remains yours.
Custodians, not owners
We see ourselves as custodians of your information. Both personal and business data are protected, accessible only to you, and handled with care.
Lawful processing
All data processing is carried out in accordance with GDPR and DSGVO, with strong encryption and strict security measures in place. See Is WrkLst secure? for the technical detail.
Your rights over your data
You can access, rectify, delete and export your data at any time. Your entire account can be exported as a complete SQL dump on demand, so leaving WrkLst never means losing your records.
Privacy by design and by default
Privacy-focused architecture is built into WrkLst at every level rather than added afterwards.
Storage and transfers
All data is stored in line with EU regulations. Our servers are in Germany and Finland, with backups in Switzerland — see How and Where is WrkLst Hosted?. Any transfer outside the EU follows GDPR-compliant safeguards.
AI and your data
AI is never applied to your data without your active, prior consent, and any feature that uses AI is clearly and transparently labelled. Where AI is used, it runs on open-source models hosted in Switzerland, your prompts are never recorded and never used to train a model, and AI can be switched off for the whole workspace. See Does WrkLst use AI on my data?.
Data Processing Agreement
A DPA is available to all customers — see Does WrkLst Provide a Data Processing Agreement (DPA)?.
For more detail on how we handle data, see our Privacy Policy or contact us at support@wrklst.art.