Security and data protection

• Encryption: all traffic is encrypted in transit (TLS); data is encrypted at rest by our infrastructure providers.
• Access control: row-level security means each clinic/store can only ever see its own data — enforced at the database layer, not just the app. Staff accounts have per-section permissions you control.
• Two-factor authentication is available on dashboard accounts, and strong password rules are enforced.
• Isolation: your AI's knowledge, prompts, and conversations are scoped to your account only.
• Deletion: ask us to delete your data at any time and we will, completely.
• Honesty about stage: we are an early-stage product. We do not yet hold SOC 2 or ISO certifications — those are on our roadmap as we grow. What we promise today is what is actually built, listed above. If you have a security question, ask us directly: ai.flowverse@gmail.com.