The document states that WorkOS (cross-domain identity management) and Merge API (infrastructure management via Connectors) are engaged only when the customer elects to use those features. Pylon Labs is engaged only when the customer elects premium support. These sub-processors do not process Customer Data by default.
This analysis describes what OpenAI's agreement states, permits, or reserves. It does not constitute a legal determination about enforceability. Regulatory applicability and practical outcomes may vary by jurisdiction, enforcement context, and individual circumstances. Read our methodology
This provision establishes that three sub-processors are conditionally engaged based on feature or support tier elections, meaning the applicable sub-processor set varies by customer configuration. Compliance teams should document which optional features are enabled to maintain accurate sub-processor records.
Under this clause, WorkOS, Merge API, and Pylon Labs are not engaged as sub-processors unless the customer explicitly enables Connectors, cross-domain identity features, or premium support, respectively. Customers who have not activated these features are not subject to data processing by these entities.
Cross-platform context
See how other platforms handle Customer-Elected Sub-processors (WorkOS, Merge API, Pylon Labs) and similar clauses.
Compare across platforms →"** At election of customer ***At election of customer; applicable to premium support onlyExcerpt from OpenAI's Sub-Processor List
1.
Enforcement risk, jurisdiction flags, contract triggers, and due diligence action items.
Get the research letter
Companies change their terms quietly. We read every version and catch what actually changed. One email a week on the changes that matter and what they mean.
This provision establishes that three sub-processors are conditionally engaged based on feature or support tier elections, meaning the applicable sub-processor set varies by customer configuration. Compliance teams should document which optional features are enabled to maintain accurate sub-processor records.
Under this clause, WorkOS, Merge API, and Pylon Labs are not engaged as sub-processors unless the customer explicitly enables Connectors, cross-domain identity features, or premium support, respectively. Customers who have not activated these features are not subject to data processing by these entities.
No. ConductAtlas is an independent monitoring service. We are not affiliated with, endorsed by, or sponsored by OpenAI.