Enterprise prospects ask where their data lives, who can access it, and how GDPR requests are handled. This page sets out what Flow80 provides today.
Features that help you meet your obligations as a controller. Flow80 does not currently hold a third-party security certification.
Tools for handling access, portability, and erasure requests from inside the product.
The documents your procurement and legal teams ask for.
Visibility into what happened in your account, and control over how long data is kept.
Controls that are part of the core platform.
Requests are resolved to your organisation, and application data queries are scoped to that organisation.
Security-relevant actions and workflow failures are recorded in an audit log, which your administrators can review.
Admin, editor, and viewer roles control what each user can do. Single sign-on via SAML 2.0 can be configured per organisation.
Credentials you store for integrations are kept encrypted, and connections to Flow80 are served over HTTPS.
Set retention periods for your data in the compliance settings. Changes to retention settings are recorded in the audit log.
The Flow80 platform is EU / European hosted. Our sub-processor list is published on this site.
Read our standard GDPR Data Processing Agreement and the list of sub-processors we use.
Automate your workflows on an EU / European hosted platform with GDPR tooling built in.