Trust Center

flowscope Trust Center

Our security and privacy

What we collect and what we never capture, how we run the platform, and how you verify it. Every document, live control and legal term behind those claims is one click below.

Browse the docsContact security
AICPA SOC for Service Organizations mark. flowscope's SOC 2 Type I report was issued in August 2026.SOC 2GDPRHIPAA

AI data handling

No AI training

OpenAI processes customer data under contractual Zero Data Retention.

Hosting

United States

Customer data is processed and stored in the United States.

What we record

Work apps only

Your company picks the apps. Personal apps are excluded.

Personal data

Full data redaction

Masked on the device, and again before storage.

Start here

Where to start, by role.

For employeesWhat this means for employeesFor anyone taking part. The page to send them before anything is installed.OpenFor ITDeploying flowscopeFor whoever is rolling flowscope out.OpenFor leadershipThe engagement at a glanceFor whoever is deciding to run an engagement, or announcing one.Open
Documents & controls

Documents and the controls behind them.

Public pages

3

The default exclusion list, the third parties that process customer data, and the changes flowscope announces.

Categorical denylist

The default exclusion list every organization starts from, and its version history.

Read the page

Subprocessors

Every third party that may process customer data, what it touches, and how customers stay informed when the list changes.

Read the page

What's New

The dated record of changes to what flowscope records and to its commitments to customers, its compliance milestones, and planned maintenance.

Read the page

Security policies

23

The information security policies behind the SOC 2, GDPR and HIPAA programs. Request the package below or email security@flowscope.com.