Skip to main content
Log InStart Free

Trust Center

What we commit to, and where we stand.

Designed with enterprise security and governance requirements in mind. This page covers privacy, our compliance roadmap, continuity and incident response.

Security practicesCompliance roadmap

Privacy

We collect what an account needs and nothing for advertising.

  • One essential cookie keeps you signed in. No advertising cookies and no third-party trackers.
  • Website analytics are off unless a provider is configured, and then respect your consent choice.
  • We do not sell personal data.
  • When we host the platform we act as your data processor; a data processing agreement is available.
  • When you self-host, your data does not reach us.

Compliance roadmap

DooHorizon does not currently hold any security or privacy certification. This is the order in which we intend to pursue independent assurance; dates will be published when they are committed.

  • Document and publish security policies and a subprocessor list.Planned
  • Independent penetration test with a customer-shareable summary.Planned
  • SOC 2 Type I, then Type II.Planned
  • ISO/IEC 27001.Planned
  • Sector-specific assessments as customer needs require.Planned

Business continuity

Getting your work back matters as much as protecting it.

  • Administrators can take a backup of platform data on demand.Today
  • Flows and projects can be exported and kept under your own control.Today
  • Health and metrics endpoints support your own monitoring.Today
  • Published recovery objectives for the hosted service.Planned

Incident response

If something goes wrong, you hear it from us.

  • Report a suspected vulnerability or incident to the security contact below; we acknowledge reports and keep the reporter informed.
  • Affected customers are notified without undue delay with what happened, what was affected and what we are doing.
  • A public status page and a formal disclosure policy.Planned

Documents

The agreements, in plain language.

  • Privacy Policy

    What we collect, why, and the choices you have.

    Read

  • Terms of Service

    The agreement between you and us when you use the website and platform.

    Read

  • Data Processing Addendum

    How we process personal data on your behalf when we host the platform for you.

    Read

  • Cookie Policy

    The short version: one essential cookie, and analytics only with your agreement.

    Read

Sub-processors and third-party services

By default the website loads no third-party scripts, fonts or trackers; analytics, if enabled, is disclosed in the Cookie Policy. The platform connects only to the systems you configure. A list of sub-processors for the hosted service will be published here before it is offered commercially; ask us at hello@flowdoo.tools if you need it for a review now.

Contact the security team

Security questions, vulnerability reports and incident notifications: hello@flowdoo.tools.

One platform. A better way to build with data and AI.

Start with one use case. Expand across the ecosystem.

Start FreeBook Enterprise Demo