Trust Center
Security and privacy overview for FlowState Charts
Security controls
Compliance
DPA on request
Data processing agreement available for organizations that need one
B2B product
Designed for teams and organizations, not consumer social accounts
Transparent policies
Privacy, terms, and trust documentation published for customers
Data & AI governance
No training on your data
Customer prompts and outputs are not used to train foundation models
Organization isolation
Workspaces are scoped per organization with access controls
Encryption
TLS in transit; encryption at rest for sensitive application data
Infrastructure
Cloud hosting
Production workloads run on major cloud providers with regional options
Private networking patterns
Services are designed to limit public exposure of databases and internals
Secrets management
API keys and credentials stored in a secrets manager with least privilege
Application security
Role-based access
Admin and member roles within each organization
Case isolation
Cases, documents, and chats stay within the owning organization
Modern authentication
Sign-in and session management via Clerk
Organizational security
Need-to-know access
Production access limited to authorized operators
Confidentiality
People with system access are bound to confidentiality obligations
Incident response
Defined process to detect, assess, and communicate security incidents
Business continuity
Backups
Regular database backups with a defined recovery window
Availability patterns
Stateless app tasks and health checks for redeploy resilience
Deletion practices
Customer data handled according to contract and retention settings
Cloud security posture
Core infrastructure relies on cloud providers that publish independent security audits. Replace this section with your actual certifications when ready.
Questions? Email hello@flowstate-charts.io.
Subprocessors
Example subprocessors used by this template. Update the list for your deployment.
| Provider | Purpose | Region |
|---|---|---|
| AWS | Infrastructure, compute, storage, logging | Regional |
| Supabase | Database & storage | Regional |
| Clerk | Authentication & organizations | US/EU |
| Stripe | Billing & payments | US/EU |
Request a data processing agreement
Need a DPA for your organization? Review our placeholder agreement and contact us to finalize terms.
View DPA