Requesting a Data Processing Addendum (DPA)
Available on: Wispr Flow web dashboard
If your organization is subject to EU or UK GDPR, you may need a Data Processing Addendum (DPA) before rolling out Wispr Flow. The standard DPA is a downloadable document available to every dashboard member on every plan, including non-admins.
How to get the DPA
Note: No separate portal sign-in, company-email address, or NDA acceptance is required. The Flow API dashboard does not list the DPA.
Sign in to the Wispr Flow dashboard.
Open Privacy in the sidebar.
Click the Data processing addendum card.
The whole card opens the document in a Google Drive file viewer in a new tab, without downloading it in-page. Privacy has no request form or download button.
Billing pages use a different DPA URL: https://wisprflow.ai/legal/dpa.
What the DPA includes
The EU Standard Contractual Clauses (SCCs) for transfers of personal data out of the EEA.
A UK Addendum for transfers subject to the UK GDPR.
Annex III, listing current subprocessors. Wispr gives at least 10 days' prior written notice before adding a new subprocessor.
Note: The DPA PDF defines these terms, including the subprocessor notice period. Confirm details against the current document before relying on them.
FAQs
Can support email us a copy of the DPA instead?
Yes. The DPA is a publicly linked document, so support can share the same link or file.
Do you provide a Transfer Impact Assessment (TIA)?
No. Under the SCC framework, you carry out the TIA as the data controller. Wispr supports it with the DPA (including the SCCs and Annex III) and the SOC 2 report on trust.wispr.ai.
Why is the SOC 2 link disabled?
On Privacy, SOC 2 and HIPAA compliance is the only card requiring an Enterprise plan; the SOC 2 entry in Settings → Organization has the same restriction. On other plans, the Privacy card is disabled, and its Enterprise pill shows "Upgrade to Enterprise plan to access" and opens Settings → Billing. The Organization entry is also disabled, with the tooltip "Upgrade to Enterprise plan to use this feature".
Where is our data processed?
All customer data is processed in the United States; there is no regional processing in the EEA or Asia-Pacific. Transfers out of the EEA are covered by the SCCs in the DPA.
Still need help?
Select Help in the dashboard sidebar to email support@wisprflow.ai if:
You cannot open the DPA link from the dashboard Privacy page. Mention any Google Drive restrictions or pop-up blocking.
Checkout shows "Couldn't start checkout. Try again." on Settings → Billing after any failed attempt to start checkout, including the first.
You need SOC 2 or another compliance document your plan does not grant access to, or a document not published on the Privacy page.
Include your account email, plan, the document you need, your browser and device, and what you tried.
For organization or legal requests, contact enterprise@wispr.ai.
Need a hand?
Reach the Flow team and we’ll help you get unblocked.