FlowSharp is designed with security as an operational requirement, not as an add-on feature. Every security mechanism is embedded in the flow, not applied as an external layer.
Main security mechanisms:
Data Shield — fields marked as sensitive are never exposed to AI, ReadOnly users or unauthorised systems. The marking follows the data in all transfers.
Secret variables — variables of type secret (credentials, tokens, API keys) are encrypted at rest and never shown in clear text in the console, logs or exports.
Granular roles — 5 access levels (ReadOnly, Operator, FlowDesigner, Admin, Super Admin) with separate permissions for reading, writing, configuration and administration.
Complete audit — every action on an item (creation, transition, task, data modification, access to sensitive data) is recorded in the timeline with user, timestamp and detail. Immutable.
Flow versioning — published flows are versioned. Changes do not impact in-progress cases and every version is tracked with author and date.
Multi-tenant isolation — each organisation has its own isolated tenant. There is no data sharing between different tenants.
Revocable API keys — each integration key is individual, tracked and revocable instantly without impacting other integrations.
For specific compliance requirements (GDPR, ISO 27001, banking or healthcare sector), contact the FlowSharp team for a dedicated assessment.