SOC 2
In-progressHera's SOC 2 readiness work is in progress. Hera has not completed a SOC 2 audit and will publish report availability only after an independent audit is complete.
Trust Center
Security and privacy documentation for Hera enterprise reviews
Hera helps teams create AI motion graphics from prompts, uploaded assets, and project files. This trust center collects the public policies and practices that enterprise buyers need when reviewing data handling, privacy, security, and compliance status.
Security practices
Controls, account protection, application security, incident response, and compliance roadmap.
OpenPrivacy Policy
How Hera collects, uses, shares, protects, and deletes personal information.
OpenData processing practices
Processor roles, customer content handling, AI data use, retention, transfers, and DPA status.
OpenSubprocessors
How enterprise customers can request Hera's current subprocessor list and review packet.
OpenData commitments
The short version for security questionnaires
These commitments are intentionally plain-language summaries. The signed terms for an enterprise customer should be reviewed in the applicable order form, terms, and DPA.
- Customer uploads, prompts, and generated videos are used to provide the Hera service, not for model training unless Hera receives explicit prior consent.
- Hera distinguishes customer content from aggregated usage analytics in the Terms and Privacy Policy.
- Access to production systems and customer data is limited to people and services with a business need.
- Enterprise customers can request a DPA review, security questionnaire response, and subprocessors detail during procurement.
Compliance
Current status, without certification theater
Hera will not display certifications, audit badges, or compliance claims before they are complete. The table below shows the current public status.
GDPR and UK GDPR
Practices documentedHera documents processor/controller roles, customer data rights, transfers, and DPA availability for enterprise customers.
AI data use
No customer-content training by defaultHera does not use customer uploaded assets or user content for machine-learning model training or dataset creation without explicit prior consent.
Enterprise review
Available on requestSecurity questionnaires, vendor details, and contractual data processing terms can be reviewed with qualified enterprise customers.
Need a vendor review packet?
Send us your security questionnaire, DPA requirements, or procurement checklist. We will answer based on Hera's current controls and identify any roadmap items clearly.