Issue
Customer is looking for a copy of DPA from Heroku for their business requirements
Resolution
Almost every Enterprise organization would require a written consent or Data Processing Agreement in order to ensure that their clients data is being safe and is valued. At Salesforce, trust is our #1 value and the protection of our customers' data is paramount. We know that many organizations have questions about GDPR and the new obligations under GDPR. We have created this document to help you on your compliance journey.
For more information, please refer to our GDPR article: https://devcenter.heroku.com/articles/gdpr
Here's the link to learn how we prepare our customers for the GDPR: https://devcenter.heroku.com/articles/gdpr#preparing-our-customers-for-the-gdpr
Looking for more information? Check out the specific details here
Still needed clarifications? Worry not!
You can always reach out to Heroku support via http://help.heroku.com/
The specific link to the DPA is here and there is not a Heroku specific DPA (we have a DPA that covers all service offered by Salesforce, including Heroku):