Heron
Transparency
Breakdown
| Subprocessor list | 30 / 30 | |
| Processing locations | partial | 0 / 8 |
| Purposes | partial | 0 / 7 |
| Data processing addendum | not found | 0 / 12 |
| Trust center | 8 / 8 | |
| Privacy policy | 6 / 6 | |
| security.txt | not found | 0 / 6 |
| Security page | 5 / 5 | |
| Status page | 5 / 5 | |
| Vulnerability disclosure | not found | 0 / 5 |
| Pages still reachable | 8 / 8 | |
| Total | 62 / 100 |
Only documents we can retrieve count: a page behind a login or a broken link scores nothing.
Badge
For Heron's own site; it updates with the rating.
<a href="https://thirdpartyindex.com/vendors/heron"><img src="https://thirdpartyindex.com/badge/heron.svg" alt="Heron transparency rating on Third Party Index" height="20"></a>[](https://thirdpartyindex.com/vendors/heron)Compliance
- Certified
Certifications as Heron's trust center lists them; reports are usually shared on request (evidence)
Not listed by any tracked vendor.
Documents
| Document | Verified | Changed | Evidence |
|---|---|---|---|
| Trust center vanta | snapshot | ||
| Subprocessor list | snapshot | ||
| Privacy policy | snapshot | ||
| Terms | snapshot | ||
| Security page | snapshot | ||
| Status page incident.io | snapshot |
Subprocessors
| Name | Purpose | Location | Listed since |
|---|---|---|---|
| Amazon Web Services (AWS) | |||
| Cloudflare | |||
| Google Cloud Platform (GCP) | |||
| Heroku | |||
| Hubspot | |||
| Linear | |||
| Moneythumb | |||
| Notion | |||
| OpenAI | |||
| Postmark | |||
| Pylon | |||
| Retool | |||
| Sentry | |||
| Stytch | |||
| Vercel |
Service status
- 3 incidents in 90 days
- 1 major or critical
- 1 h 22 min typical time to resolve
- 19 min longest major
| Began | Incident | Impact | Lasted |
|---|---|---|---|
| Heron Dashboard slow to load | minor | 2 h 33 min | |
| Issue: old submissions with Wells Fargo bank statements reprocessed | minor | 1 h 22 min | |
| Submission processing affected | major | 19 min | |
| Workflow Enricher errors | critical | 50 min | |
| Degraded bank statement parsing | minor | 44 min | |
| Database CPU upgrade | none | — | |
| Increased API and webhook responses | none | — | |
| Degraded API performance | none | — |
As Heron's status page reports its own incidents (scheduled maintenance left out), read every few hours since (evidence)
Changes
None since tracking began.