Tool profile
heyData: cost, fit and limits
heyData is a privacy and compliance software platform made by heyData GmbH that handles GDPR documentation, impact assessments, data processing agreements and vendor checks, and adds ISO 27001, NIS2 and EU AI Act modules. Subscriptions include expert and legal support, so it is aimed at small and mid-sized companies in Europe.
What to know first
heyData sells compliance as software plus a human layer, and the pricing page shows the split: three data privacy tiers differ mostly by legal support hours, response time and liability amount, not by features alone. The page also notes that the price depends on company size and modules. Security and AI governance packages are quote-only, as are the bundles that combine them.
heyData at a glance
| Maker | heyData GmbH, Germany |
|---|---|
| Free plan | No |
| Entry price | From 59 euros per month billed yearly (Starter) |
| API access | No |
| Category | Best AI Data Privacy Management Software in 2026, rank 2 of 10 |
| Website | heydata.eu |
Who heyData is best for
Startups with no privacy counsel
The Starter tier includes basic compliance features and creation of initial documents, and Professional adds 15 hours of legal support a year, so a company without a lawyer gets guidance with the software.
Firms bundling privacy with ISO 27001
heyData lists ISO 27001, NIS2 and EU AI Act modules and advertises bundles that save up to 30 percent, which helps buyers who must pass a customer audit as well as meet GDPR.
Agencies and resellers
The Enterprise tier adds whitelabeling and integrations, so a consultancy can offer data protection services under its own brand to clients.
DACH buyers wanting local operation
The site calls itself a German company under European law and says it is operated in Germany, which answers the common question about access by non-EU authorities.
heyData plans and pricing
| Plan | Price | What it includes |
|---|---|---|
| Starter | EUR 65 per month, or EUR 59 billed annually | Basic compliance features, one DPIA, one website and one app documented, support response up to 5 days and liability of EUR 50,000. |
| Professional | EUR 120 per month, or EUR 99 billed annually | Starter plus employee training, DPIAs, a data protection seal, 15 legal hours per year, three DPIAs, three websites and a 48 hour response. |
| Enterprise | EUR 178 per month, or EUR 169 billed annually | Professional plus unlimited legal support, whitelabeling, integrations, ten website documentations, a 24 hour response time and liability of EUR 250,000. |
| Information Security and AI and Governance | Quote only | ISO 27001 and NIS2 plans, and EU AI Act plans, priced by company size and modules, with bundles of both advertised as saving up to 30 percent. |
Checked November 2026.
What heyData does
- AI-powered automation
- The AI module prepares impact assessments, risk assessments and policy drafts, with the heyData team backing the output. The page does not name models or say what data the automation reads.
- Documentation and TOMs
- The data privacy modules cover GDPR, UK GDPR and Swiss revFADP, DPIAs, technical and organizational measures, and data processing agreement management for websites and apps.
- Vendor assessments
- The page cites more than 4,400 pre-filled vendor assessments, which can shorten onboarding of a new supplier. Vendor Risk Management is listed with limited features on lower tiers.
- Compliance training
- Training is an extra charge on Starter and part of Professional. The site cites more than 28,000 completed trainings, a vendor figure that cannot be verified from the page.
- Whistleblower and consent tools
- The AI and governance area lists a whistleblower system and compliance audit, and cookie and consent management appears in the footer navigation, though its plan coverage is not explained.
How heyData handles your data
The site describes heyData as a German company under European law and says it is operated in Germany, with no access by non-EU authorities. It shows ISO 27001 and GDPR compliant badges in the footer. Retention periods, the sub-processor list and whether customer inputs train any AI model were not stated on the pages read, so the vendor's policy was not checked for this. Because AI automation drafts documents from company information, ask which provider handles the text and where.
Where heyData falls short in practice
- Starter caps are tight. Starter allows one DPIA, one website documentation and one app documentation. A company with several sites or products will move to Professional quickly. Plan for that cost.
- Liability figures lack context. The page lists EUR 50,000 to EUR 250,000 by tier but does not say whether the amount is per year or per claim. Read the terms before treating it as insurance.
- Security and AI plans are not priced. Only the data privacy plans show list prices. An ISO 27001 or EU AI Act project needs a quote, which makes the total cost hard to compare.
Works with
Alternatives to heyData
heyData: common questions
How much does heyData cost?
As of November 2026 the data privacy plans start at EUR 65 per month for Starter, EUR 120 for Professional and EUR 178 for Enterprise, with annual billing at EUR 59, EUR 99 and EUR 169. The page says price depends on company size and modules, so treat these as starting points.
Is legal advice included in heyData plans?
Legal support scales by tier: none on Starter, 15 hours a year on Professional and unlimited on Enterprise, with response times of up to 5 days, 48 hours and 24 hours. Add-ons such as training cost extra. Confirm in the terms what counts as legal advice.
Does heyData cover the EU AI Act?
Yes, an AI and Governance plan covers the EU AI Act, with an AI inventory and risk assessment listed in the footer. It is priced by quote and can be bundled with the information security plan at a stated saving of up to 30 percent.
Where is heyData based?
The site presents heyData as a German company under European law, operated in Germany, with no access by non-EU authorities. For a contract, ask for the registered address, the hosting provider and the list of sub-processors in the data processing agreement.
What is the heyData liability amount?
The pricing page lists liability of EUR 50,000 for Starter, EUR 100,000 for Professional and EUR 250,000 for Enterprise. It does not say whether the figure applies per year or per claim, nor what it covers, so have the terms reviewed before relying on it.