Enterprise security
Security by default
How we protect your data
End-to-end encryption
All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Your workspace data is never readable by anyone except your team.
TLS 1.3 in transit
AES-256 at rest
Role-based access control
Fine-grained permissions let admins control exactly who can see, edit, and share what. SSO and SAML support for Enterprise teams.
SSO & SAML 2.0
Multi-factor authentication
Privacy first, always
We never sell your data. Our AI models are trained only on publicly available datasets. Your workspace content is never used to train any model, ever.
GDPR & CCPA compliant
Zero data retention after deletion
Compliance & certifications
FlowState maintains SOC 2 Type II certification and undergoes annual third-party pen tests. We publish a public security changelog for complete transparency.
SOC 2 Type II certified
Annual third-party pen testing