Last updated: March 21, 2026
This Data Processing Agreement ("DPA") forms part of the agreement between HeyWren, Inc. ("Processor") and you ("Controller") for the provision of the HeyWren platform. This DPA reflects the parties' agreement with regard to the processing of personal data in accordance with applicable data protection laws.
HeyWren processes personal data on behalf of the Controller to provide the work observability and commitment tracking service. The categories of data processed include names, email addresses, communication metadata, commitment data, and calendar event metadata.
HeyWren processes personal data only in accordance with documented instructions from the Controller. We implement appropriate technical and organizational measures to ensure a level of security appropriate to the risk, including encryption, access controls, and regular security testing.
HeyWren uses the following categories of sub-processors: cloud infrastructure (hosting and storage), communication delivery (email notifications), analytics (anonymized usage metrics), and AI processing (commitment detection). A current list of sub-processors is available upon request.
HeyWren will assist the Controller in responding to requests from data subjects exercising their rights under applicable data protection laws. We provide tools for data export and deletion directly within the platform.
In the event of a personal data breach, HeyWren will notify the Controller without undue delay (and in any event within 72 hours) after becoming aware of the breach, and will provide sufficient information to allow the Controller to meet its obligations under applicable law.
If personal data is transferred outside the European Economic Area, HeyWren will ensure appropriate safeguards are in place, including Standard Contractual Clauses approved by the European Commission.
For DPA-related inquiries, contact our Data Protection Officer at dpo@heywren.ai.