Analytics preference

We only load Google Analytics after you opt in. You can change this choice at any time from Cookie settings.

Heym Work

Heym Work is a second interface for business teams, built on top of Heym.

Heym Work is a second interface for business teams, built on top of Heym. People describe a job in their own words, answer a few questions, and get a workflow that Heym has built and tested. They work from pages built for them, answer reviews, and see every run with a name on it. Heym runs every job in the background.

Heym Work runs as its own container next to your Heym, with a separate license from the Heym team. Learn more and request a trial at heym.run/enterprise. Watch the Heym Work film for a two-minute tour.

What Business Teams Get

AreaWhat it does
ChatDescribe a job by typing or by voice. Heym asks what it needs, builds the workflow, tests it, and marks it Verified.
PagesPinned pages of widgets: numbers, charts, tables with status chips, file drops and approvals. A table row can open its own detail page.
ApprovalsReviews from Human-in-the-Loop steps wait in Activity and on pages, with Approve, Request changes and Reject.
ActivityEvery run, with the person who started it and the instance that ran it.
RolesOwner, Editor and Viewer. People sign in with the single sign-on Heym already uses.
Industry editionsLegal, education, finance, logistics, energy and e-commerce editions open with pages, sample data and workflows for that industry.

Connecting Heym Work

Watch the install video for the whole setup, from the first command to Home.

The connection is set up in Settings → Heym Work. The tab appears only for instance administrators, the accounts listed in HEYM_ADMIN_EMAILS.

FieldWhat it does
Heym Work addressWhere Heym Work runs, for example https://work.example.com. Sign-in returns there. Press Save.
Integration keyGenerate key creates the key Heym Work uses for every request to Heym. It is shown once, with a copy button. Heym stores only its hash.
Enable Heym WorkTurns the connection on. It needs the address and a key first.
StatusLast seen, Work version and License, as Heym Work last reported them.

Then open Heym Work's address and finish its setup:

  1. License: enter the license key from the Heym team.
  2. Heym: enter Heym's address and the integration key.
  3. Owner: sign in with an account listed as a Heym Work Owner.

Home opens, ready for the team.

Rotating the Key

Rotate key replaces the integration key. Heym Work stops working until the new key is entered there, and everyone signed in to Heym Work is signed out. Use it when the key may have leaked or when someone who saw it leaves.

Disabling the Connection

Switch off Enable Heym Work to stop the connection. Heym Work then asks for Heym's key again. Heym keeps running every workflow, schedule and webhook either way.

Security Model

  • Every change goes through Heym. Heym Work reads what it shows from Heym's database, and sends every action to Heym over the key-protected channel, where Heym applies its own access rules. Heym Work keeps its own data in a separate heym_work schema.
  • The key is hashed at rest. Heym compares a hash of the presented key and never stores the key itself.
  • Sign-in stays with Heym. People sign in through Heym, with your identity provider when SSO is on.
  • Changes are audited. Saving the connection and rotating the key write work_integration.update and work_integration.key_rotate lines to the audit log.

Licensing

Heym Work needs its own license key, issued by the Heym team. Each day Heym Work sends heym.run its license ID, an installation ID, the number of active users in the last 30 days, the total number of members, the number of runs in the last 24 hours, and the Heym and Heym Work versions. Workflow content, inputs, outputs and credentials stay on your servers.

If the daily sync fails for 30 days, a 14-day grace period starts, and after it the Heym Work interface asks an Owner for a key. A trial runs through its last day and reopens when the Heym team extends it, with one trial per installation. Heym itself keeps running throughout. Networks without internet access use an offline license from enterprise@heym.run.

Videos

All Heym Work videos are in the Heym Work playlist.