Security
Last updated 1 September 2026
You are running your business finances through FlowDesk. Here is how we look after it, and what we ask of you.
Encryption
All traffic is served over TLS 1.3. Data at rest is encrypted with AES-256.
Documents you upload are stored in object storage with per-object encryption keys.
Access control
Team members get role-based access; permissions are available on the Pro plan.
Two-factor authentication is available on every plan and can be enforced across your team.
Our own staff access to customer data is restricted, logged and reviewed.
Reliability
Encrypted backups run continuously with a 30-day retention window.
Recovery procedures are tested quarterly against a restore target of four hours.
Monitoring and disclosure
Infrastructure is monitored around the clock and incidents are published on our status page.
If a breach affects your data we notify you without undue delay, with what we know and what we are doing.
Reporting a problem
Write to security@tryflowdesk.space. We acknowledge reports within one business day and do not pursue good-faith researchers.