Signed. Sealed. Provable.
Flowsign is built for the paperwork your business depends on. Here's how we keep it safe - and how you can verify it for yourself.
Protected at every step, and provable afterwards.
Encrypted in transit and at rest
TLS 1.2+ in transit and AES-256 at rest. Our white-label offering can add a dedicated database in the region you choose.
Sealed with a Flowsign certificate
Every completed document is digitally sealed with a Flowsign certificate. A PDF changed after completion fails verification.
Tamper-evident audit trail
Every view, consent, authentication step, signature and delivery event is recorded with a timestamp, IP address and device, and each completed package comes with a certificate of completion.
Roles and teams
Give each person the access their role needs and group them into teams. Least-privilege by default - a sender can't see another team's packages.
Tenant isolation
Every customer-scoped query is filtered by organisation, so one customer's documents can't be returned to another. Files are served through short-lived signed links.
Staff access with 2FA
Least-privilege access for our team, through Google Workspace single sign-on with mandatory two-factor authentication.
Reviewed sub-processors
A short list of providers, each bound by a data processing agreement. See our sub-processors.
Working towards SOC 2 and ISO 27001
Our controls programme is documented and shared with enterprise customers under NDA, with independent audits on the roadmap.