Security and privacy FAQ

Where is my data stored? See Data residency for database-location and processing information. Discuss any specific storage or processing requirements with Flowpane during onboarding.

Is my data encrypted? Data in transit uses TLS. Saved deployment passwords are encrypted and are not returned in the settings display.

What does Flowpane fetch from my site? Public governance checks fetch the governance resources at their conventional paths, your homepage and sitemaps; a Deep Scan follows reachable Site links within its limits. These checks do not sign in as one of your website users. A supported Site Integration provides additional permitted CMS observations through its connection. Connecting Flowpane does not give permission to modify the Site; Managed changes must be explicitly enabled separately.

Can I delete my account? You can deactivate your account from Settings → Danger zone. Deactivation removes your ability to sign in but is separate from a personal-data erasure request. To request erasure, email hello@flowpane.com. See Danger zone.

Who can see my Sites? Every member of the Workspace that owns the Site, according to their role. Use separate Workspaces when different groups need access to different Sites. Authorised support access is governed by the applicable privacy and data-processing terms.

Does Flowpane sell my data? Flowpane does not sell personal data. Service providers may process data to provide the service, as described in the Privacy notice and applicable data-processing terms.

Do report recipients need to consent? Eligible current Workspace members become Active immediately when added as Site report recipients. External addresses must confirm their invitation before becoming Active. Flowpane rechecks eligibility before sending; a consent record is not a delivery receipt. Recipient addresses in Activity are visible only to people authorised to manage recipients for that Site. See Report recipients.

Is two-factor authentication available? Application two-factor authentication is unavailable for the current service. See Security.