Enterprise
Policies and agreements that apply across all Heuristicworks products.
Legal
Privacy policy, data retention.
Security
ISP, vulnerability disclosure, supply chain risk, incident response.
Compliance
DPIA, disaster recovery plan.
Data Processing Agreements
Signed DPAs with all sub-processors.
All documents
Privacy Policy
PublicHow Heuristicworks collects, uses, and protects personal data.
Effective 2026-06-01
Data Retention Policy
PublicHow long customer and operational data is retained, and when it is deleted.
Effective 2026-06-01
Information Security Policy
PublicPrinciples, responsibilities, and controls governing data and system security.
Effective 2026-07-01
Vulnerability Disclosure Policy
PublicHow to report security vulnerabilities and our response process.
Supply Chain Risk Policy
PublicAssessment and management of third-party and supply chain security risks.
Effective 2026-07-01
Incident Response Plan
On RequestInternal procedures for detecting, containing, and recovering from security incidents.
Effective 2026-07-01
Data Protection Impact Assessment — Spexsure
On RequestGDPR Article 35 DPIA conducted for the Spexsure platform (July 2026).
Effective 2026-07-01
Disaster Recovery Plan
On RequestBusiness continuity and system recovery procedures for service disruptions.
Effective 2026-07-01
Anthropic — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Anthropic.
Effective 2026-07-01
Atlassian — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Atlassian.
Effective 2026-07-01
Cloudflare — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Cloudflare.
Effective 2026-07-01
PostHog — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and PostHog.
Effective 2026-07-01
Resend — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Resend.
Effective 2026-07-01
Stripe — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Stripe.
Effective 2026-07-01
Supabase — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Supabase.
Effective 2026-07-01
Upstash — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Upstash.
Effective 2026-07-01
Vercel — Data Processing Agreement
On RequestSigned DPA between Heuristicworks LLC and Vercel.
Effective 2026-07-01