Security

What follows is what is true today. ShapeFlow holds no security certifications, and claims none.

One database per client

Each client gets its own database. Your data is not a row in a shared table separated by a tenant column. This matters in the telecom channel, where the agencies using ShapeFlow compete with each other: there is no query that could return another agency's numbers, because their numbers are not in your database.

Hosted in the EU

ShapeFlow runs on Microsoft Azure in EU regions. Your data stays in the EU.

Encrypted in transit and at rest

All traffic is served over TLS. Data is encrypted at rest.

Backups

Databases are backed up automatically.

Your data, on request

Ask, and you get a full export of your data in a machine-readable format. It is your data, and there is no exit fee for taking it.

GDPR

ShapeFlow processes personal data under the GDPR. For a Data Processing Agreement (DPA), or any question about how your data is handled, write to us.

Data protection contact

Email: contact@shapeflow.io
Location: Portugal