Writer
Writer (WRITER Agent, Palmyra)
Provider: WRITER Inc. · Based in: WRITER Inc., 111 Maiden Lane, Fourth Floor, San Francisco, CA 94108, USA · Provider website
- Plans
- 2
- Sources
- 11
- As of
- 18 Oct
As of 18 Oct 2026. Based on our research on this date and the process described in the methodology. No guarantee of accuracy, not legal advice. The provider’s current documents take precedence. Found an error? Report a correction.
Incomplete. 5 points could not be verified in any provider source (see open points). This does not mean the matter is unproblematic; it means we have not checked it.
At a glance
- Hosting
- mixed: all 2 plans
- Training on inputs
- no: all 2 plans
- DPA
- yes: all 2 plans
- Provider
- WRITER Inc.
- Based in
- WRITER Inc., 111 Maiden Lane, Fourth Floor, San Francisco, CA 94108, USA; EU representative: Lionheart Squared Limited, 2 Pembroke House, Upper Pembroke Street 28-32, Dublin D02 EK84, Ireland (q3)
Values from 2 plans, each listed with the plans it applies to. Details and evidence are in the plan table.
Compare Writer
Compare with another toolCompared plan by plan with other tools in the category Business software:
Details per plan
Short values per plan. Click a feature to open the evidence and notes for all plans; sources with retrieval dates are under “Evidence”.
| Feature | StarterCompare Writer Starter with another tool | EnterpriseCompare Writer Enterprise with another tool |
|---|---|---|
| differs by plan | not publicly documented | custom |
| Details: Price | not publicly documented (the pricing page shows no price; according to the FAQ, monthly or annual billing per seat with fixed credit limits; 14-day free trial, no credit card required) | Custom, contact sales (pricing page) |
| yes | yes | |
| Details: AI features included | yes (WRITER Agent for chat and automation, up to 5 users, up to 5 Playbooks, up to 3 scheduled routines, 1 team personality profile, basic connectors; AI Studio with limited access) | yes (any number of users and teams, unlimited Playbooks, advanced orchestration, audit logs, SSO/SAML, SCIM, 'Works with preferred LLMs') |
| yes | yes | |
| Details: DPA | yes (Terms of Use, version 2026-06-05, apply to free, trial and paid versions except Enterprise: 'When you are acting on behalf of an organization when accessing our Services, our Data Processing Agreement (“DPA”) applies and is incorporated by reference into these Terms.') Provider’s DPA | yes (Platform Services Agreement, version 2026-08-05, section 5.4: the DPA 'is incorporated by reference into this Agreement'; according to the Terms of Use, the Platform Services Agreement governs Enterprise) Provider’s DPA |
| no | no | |
| Details: Training on inputs | Trust page: WRITER does not train its models on customer data, user inputs or outputs; the customer controls how its data is used. Privacy policy (applies to website visitors and individual accounts): no use of data provided when accessing or using the Services for training, including inputs and outputs. Terms of Use: 'We will not use your Materials to train our models.'; however, Materials may be used to provide, maintain and improve the Services and to develop other products. | Trust page: WRITER does not train its models on customer data, user inputs or outputs; the customer controls how its data is used. Privacy policy (applies to website visitors and individual accounts): no use of data provided when accessing or using the Services for training, including inputs and outputs. Platform Services Agreement 5.2: 'Writer will not use any Customer Materials to train its models.'; licence to Customer Materials only to provide and support the platform. |
| Trust page: 'zero data retention' approach | Trust page: 'zero data retention'… | |
| Details: Data retention | Trust page: 'zero data retention' approach; data is stored only for as long as needed to use the platform. Help centre 'Setting up data retention': automatic deletion schedules only 'on certain Enterprise plans'; the default is 'No automatic deletion', content is kept until users delete it manually. Terms of Use: after termination no obligation to retain; WRITER may delete Materials. DPA section 9: return or deletion of personal data upon the customer's written request, unless the law requires otherwise. | Trust page: 'zero data retention' approach. Help centre 'Setting up data retention' (on certain Enterprise plans): default 'No automatic deletion'; org admins can set deletion after 1, 3, 6 or 12 months for docs, outputs, uploaded files, chat sessions and WRITER Meet notes (Knowledge Graph files excluded). Platform Services Agreement section 9: Customer Materials can be exported for up to 30 days after the end of the contract upon written request, after which WRITER may delete them; upon written request, destruction within 90 days. DPA section 9: return or deletion of personal data at the customer's request. |
| mixed | mixed | |
| Details: Hosting | Sub-processor list (as of 2026-10-14): cloud and infrastructure providers with processing locations in the USA and partly the EU (AWS, Google Cloud, Daytona, Parasail, Turbopuffer, Recall.ai) or worldwide (Cloudflare). Whether customers can choose an EU region, and which data is stored where, is not described. Trust page: data is provisioned in an isolated production project; 'Managed, multi-cloud options, including dedicated private cloud deployment'. | Sub-processor list (as of 2026-10-14): cloud and infrastructure providers with processing locations in the USA and partly the EU (AWS, Google Cloud, Daytona, Parasail, Turbopuffer, Recall.ai) or worldwide (Cloudflare). Whether customers can choose an EU region, and which data is stored where, is not described. Trust page: data is provisioned in an isolated production project; 'Managed, multi-cloud options, including dedicated private cloud deployment'. Enterprise: according to the pricing page, fully managed platform deployment; choice of location not described. |
| list available | list available | |
| Details: Sub-processors |
|
|
| 7 sources | 7 sources | |
| Details: Sources with retrieval date |
|
|
Compare Writer Starter with another tool
Price and scope
- differs by plan
- not publicly documented
not publicly documented (the pricing page shows no price; according to the FAQ, monthly or annual billing per seat with fixed credit limits; 14-day free trial, no credit card required)
- yes
yes (WRITER Agent for chat and automation, up to 5 users, up to 5 Playbooks, up to 3 scheduled routines, 1 team personality profile, basic connectors; AI Studio with limited access)
Contract and data use
- yes
yes (Terms of Use, version 2026-06-05, apply to free, trial and paid versions except Enterprise: 'When you are acting on behalf of an organization when accessing our Services, our Data Processing Agreement (“DPA”) applies and is incorporated by reference into these Terms.')
Provider’s DPA- no
Trust page: WRITER does not train its models on customer data, user inputs or outputs; the customer controls how its data is used. Privacy policy (applies to website visitors and individual accounts): no use of data provided when accessing or using the Services for training, including inputs and outputs. Terms of Use: 'We will not use your Materials to train our models.'; however, Materials may be used to provide, maintain and improve the Services and to develop other products.
- Trust page: 'zero data retention' approach
- Trust page: 'zero data retention' approach; data is stored only for as long as needed to use the platform. Help centre 'Setting up data retention': automatic deletion schedules only 'on certain Enterprise plans'; the default is 'No automatic deletion', content is kept until users delete it manually. Terms of Use: after termination no obligation to retain; WRITER may delete Materials. DPA section 9: return or deletion of personal data upon the customer's written request, unless the law requires otherwise.
Hosting and sharing
- mixed
Sub-processor list (as of 2026-10-14): cloud and infrastructure providers with processing locations in the USA and partly the EU (AWS, Google Cloud, Daytona, Parasail, Turbopuffer, Recall.ai) or worldwide (Cloudflare). Whether customers can choose an EU region, and which data is stored where, is not described. Trust page: data is provisioned in an isolated production project; 'Managed, multi-cloud options, including dedicated private cloud deployment'.
- list available
- Amazon Web Services (cloud): USA, EU
- Google Cloud Platform (cloud): USA, EU
- Microsoft Azure (infrastructure): USA
- Baseten (infrastructure): USA
- Cloudflare (infrastructure): worldwide
- Daytona (infrastructure): USA, EU
- Elastic Cloud (infrastructure): USA
- OpenRouter (infrastructure): USA
- Parasail (infrastructure): USA, EU
- Turbopuffer (infrastructure): USA, EU
- Exa.ai (web search): USA
- Tavily (web search): USA
- Recall.ai (services and support): USA, EU
- Snowflake (data warehouse): USA
- Fullstory, Omni, Segment (analytics): USA
- Pylon (customer support): USA
- Sendgrid (email): USA
- Stripe (billing): USA
- Writer, Inc. group companies (services and support): worldwide
Evidence
- 7 sources
- Plans & PricingPricing page, retrieved 18 Oct 2026
- Security and trust at WRITERTrust Center, retrieved 18 Oct 2026
- Privacy Policy (Effective Date April 17, 2026)Privacy notice, retrieved 14 Oct 2026
- Subprocessors (Last Updated October 14, 2026)Sub-processor list, retrieved 18 Oct 2026
- Data Processing Agreement (as of 2025-12-04)DPA, retrieved 18 Oct 2026
- Terms of Use (Version June 5, 2026)Terms and conditions, retrieved 18 Oct 2026
- Setting up data retentionHelp centre, retrieved 18 Oct 2026
not documentedmeans: not publicly documented, not verifiable in any provider source. It does not mean “no”.
Third-country transfers
Privacy policy (Effective Date 2026-04-17): data may be transferred to the USA and other countries where WRITER or its service providers are located. WRITER states certification under the EU-US Data Privacy Framework, the UK Extension and the Swiss-US Data Privacy Framework. The DPA refers to the EU standard contractual clauses (Decision (EU) 2021/914) and the UK Addendum. Transfer mechanism per sub-processor: not publicly documented. DPA 6(b): notification of new sub-processors to subscribers of the sub-processor page, objection within 14 days. Official DPF list: Writer, Inc. with status 'Active' for the EU-US DPF, UK Extension and Swiss-US DPF (next re-certification due 2027-04-21).
- Privacy Policy (Effective Date April 17, 2026) (Privacy notice), retrieved 14 Oct 2026
- Data Processing Agreement (as of 2025-12-04) (DPA), retrieved 18 Oct 2026
- Data Privacy Framework List – Writer, Inc. (Official register), retrieved 18 Oct 2026
Certifications (as stated by the provider)
The Trust Center (trustcenter.writer.com) lists ISO 27001, ISO 27701, ISO 42001, SOC 2 Type II, HIPAA Type II and PCI DSS (SAQ A) and lists as documents '2026 WRITER SOC 2 Type II + HIPAA Report' as well as ISO/IEC 27001:2022, 27701:2019 and 42001:2023 certificates 2026, each available only upon an access request. The trust page states an annual SOC 2 Type II examination and ISO/IEC 27001, 27701 and 42001; its FAQ section, by contrast, mentions 'HIPAA Type 1' and does not mention ISO. Pricing page: HIPAA and SOC 2 reports on request for Enterprise. Reports and certificates not reviewed.
- Plans & Pricing (Pricing page), retrieved 18 Oct 2026
- Security and trust at WRITER (Trust Center), retrieved 18 Oct 2026
- WRITER Trust Center (Trust Center), retrieved 18 Oct 2026
AI Act
Functions: WRITER Agent (chat and automation), Agent Builder, Playbooks, Knowledge Graph, AI Studio, own Palmyra language models, optionally further LLMs (pricing page, AI regulation page).
Provider’s statement: Vendor page 'global AI regulation' (2026-08-27): WRITER classifies its platform as a limited-risk AI system and regards itself as the provider of the platform and the Palmyra models; Art. 50 AI Act (notice of interaction with AI, machine-readable marking of synthetic outputs) is said to apply; a notice at the start of a session is in place, machine-readable marking of text outputs is in progress (according to the vendor, watermarking will in future be active by default in the EU and optional elsewhere). Neither the platform nor the models are said to be intended for prohibited practices under Art. 5. Trust page: commitment to compliance with the AI Act.
Classification (for review, not legal advice): For review: the customer is typically a deployer (Art. 3 No. 4 AI Act). Obligations depend on the agents and use cases built with WRITER (check Annex III); the provider's classification as 'limited risk' is a self-assessment. Not legal advice.
- Security and trust at WRITER (Trust Center), retrieved 18 Oct 2026
- WRITER's approach to global AI regulation (Last Updated August 27, 2026) (Documentation), retrieved 18 Oct 2026
Current notes 2026
The pricing page names only Starter and Enterprise; Starter has no public price (14-day trial). The page on AI regulation (2026-08-27) describes Art. 50 measures; the sub-processor list as of 2026-10-14 includes, alongside cloud providers, inference and infrastructure services such as OpenRouter, Baseten, Parasail and Turbopuffer as well as the web search services Exa.ai and Tavily (Together.ai is no longer listed compared with the version of 2026-07-28).
Open points of the review
- Price for Starter not publicly documented (the pricing page only states monthly or annual per-seat billing with fixed credit limits); Enterprise individual.
- Option to choose an EU data region not described on the pricing page, trust page, legal texts or help centre.
- The sub-processor list names only purpose and location; which data types (customer content vs. analytics) go to which service is not broken down.
- ISO certificates and the 2026 SOC 2/HIPAA report can be viewed in the Trust Center only upon an access request; not reviewed.
- According to the AI regulation page (as of 2026-08-27), machine-readable marking (watermarking) is still in development.
Frequently asked questions
Where does Writer store data?
mixed (plans: Starter, Enterprise). According to the provider, as of 18 Oct 2026.
Is there a DPA for Writer?
yes in: Starter, Enterprise. According to the provider, as of 18 Oct 2026.
Does Writer use inputs for AI training?
no in: Starter, Enterprise. According to the provider, as of 18 Oct 2026.
Where is the provider based?
WRITER Inc., 111 Maiden Lane, Fourth Floor, San Francisco, CA 94108, USA; EU representative: Lionheart Squared Limited, 2 Pembroke House, Upper Pembroke Street 28-32, Dublin D02 EK84, Ireland. According to the provider, as of 18 Oct 2026.
All sources
- 01Plans & PricingPricing page · retrieved 18 Oct 2026
- 02Security and trust at WRITERTrust Center · retrieved 18 Oct 2026
- 03Privacy Policy (Effective Date April 17, 2026)Privacy notice · retrieved 14 Oct 2026
- 04Subprocessors (Last Updated October 14, 2026)Sub-processor list · retrieved 18 Oct 2026
- 05Data Processing Agreement (as of 2025-12-04)DPA · retrieved 18 Oct 2026
- 06WRITER's approach to global AI regulation (Last Updated August 27, 2026)Documentation · retrieved 18 Oct 2026
- 07Terms of Use (Version June 5, 2026)Terms and conditions · retrieved 18 Oct 2026
- 08Platform Services Agreement (Version August 5, 2026)Terms and conditions · retrieved 18 Oct 2026
- 09WRITER Trust CenterTrust Center · retrieved 18 Oct 2026
- 10Setting up data retentionHelp centre · retrieved 18 Oct 2026
- 11Data Privacy Framework List – Writer, Inc.Official register · retrieved 18 Oct 2026
More tools in Business software with an EU hosting option (in at least one plan)
- DATEV AI features · Based in: Paumgartnerstraße 6-14, 90429 Nürnberg, Germany
- HubSpot Breeze AI · Based in: Cambridge, MA, USA
- Intercom Fin · Based in: Intercom R&D Unlimited Company, 124 St Stephen's Green, Dublin 2, DC02 C628, Ireland
- Lexware Office · Based in: Munzinger Straße 9, 79111 Freiburg, Germany. Contracting party and processor according to the DPA and privacy notice: Haufe Service Center GmbH
All tools in Business software · Tools with an EU hosting option
Further reading
All tools in the category: Business software. Figures across all tools: Data report.