Everything your reviewers will ask for.
Security, compliance status, sub-processors and policies — in one place, including where we are not there yet.
Certifications and compliance
Status, not badges. A certification is a fact with an auditor behind it, so this table says what actually holds today.
| Standard | Status | Where it stands |
|---|---|---|
| SOC 2 Type II | In progress | Audit underway |
| GDPR | In progress | Programme being documented |
| ISO 27001 | Planned | Not yet started |
| CCPA | Planned | Planned with GDPR |
If your process requires a certificate we do not hold yet, say so at the start rather than at contract stage — we would rather tell you now than waste your evaluation.
Sub-processors
The categories of third party involved in running the service. The current named list, with regions, is available on request.
Cloud infrastructure
Hosting for the application, the database and stored transcripts.
AI inference
Runs the models that turn a transcript into blockers, decisions and action items.
Meeting transcription
Joins the call and produces the speaker-attributed transcript.
Application monitoring
Error and performance telemetry, so faults are found before you report them.
Ask for the named list at privacy@flowstate.ai— and we will tell you before it changes.
Policies and documentation
Security
How connections are authorised, what reaches your Jira board, and what happens to a transcript.
Read the security pagePrivacy policy
What we collect, the basis for processing it, how long it is kept, and your rights over it.
Read the privacy policyTerms of service
The contract: acceptable use, service commitments, liability and how either side ends it.
Read the termsCookie policy
Every cookie the site sets, what it does, how long it lasts — and the panel to change your mind.
Read the cookie policyHave a question this page didn’t answer?
Security questionnaires are answered by the people who built the system, not forwarded to a ticket queue.