- Hosting region
- EU only
- Backup cadence
- ~Hourly
- Backup retention
- 30 days
- AI training on your data
- Never
Explore
Security
How we protect customer data: hosting, access control, encryption, vulnerability management.
AI safety
How myflow uses AI providers, what we send them, what we log, and what we never do with your data.
Privacy
EU data residency, GDPR-aligned practices, data subject rights and our Data Processing Agreement.
Resilience & backups
Near-hourly backups, 30-day retention, multi-region storage and disaster recovery posture.
Sub-processors
The infrastructure providers and SaaS vendors involved in delivering myflow.
Compliance
Our current posture, the frameworks we operate against, and our certification roadmap.
A living document
We update this site as our infrastructure, sub-processors and certifications evolve. The date in the footer tells you when it last changed.
Pre-certification, post-rigor
We do not yet hold third-party security certifications. We operate against the SOC 2 and ISO 27001 frameworks and are preparing for audit — read the compliance page for details.
Talk to our security team
Security questionnaires, DPAs, vulnerability reports — we'd rather answer than make you guess. Get in touch .