SOC 2 Type II
Audited by A-LIGN 路 Trust Services Criteria
Active 路 2025
99.99%
Uptime SLO 路 12-mo rolling
12,000+
Brands trust ChatinFlow
EU 路 US 路 APAC
Data residency regions
Audited by A-LIGN 路 Trust Services Criteria
Active 路 2025
Information security management system
Certified 路 2025
EU representative 路 DPA available
Compliant
Stripe-tokenized payments only
Compliant
Data is encrypted in transit and at rest with industry-standard ciphers and key rotation.
Least-privilege by default, SSO and SCIM included on enterprise, MFA required for staff.
Immutable, exportable audit trails for every workspace event and admin action.
24脳7 on-call with documented playbooks, customer comms, and post-incident reviews.
Defense-in-depth across CDN, WAF, runtime, and database tiers: with continuous validation.
Background checks, mandatory training, and least-privilege production access for everyone.
Secure SDLC with automated and manual testing at every stage of development.
Multi-AZ, multi-region disaster recovery with documented RTOs and RPOs.
Pin your workspace to EU, US, or APAC. Regional support hours, in-region disaster recovery, and residency commitments backed by contract.
Frankfurt 路 Dublin
Residency available 路 GDPR compliant 路 EU representative
Virginia 路 Oregon
Residency available 路 CCPA compliant 路 US-only routing
Sydney 路 Singapore
Residency available 路 regional support hours
| Subprocessor | Purpose | Region |
|---|---|---|
| Amazon Web Services | Primary infrastructure | EU 路 US 路 APAC |
| Cloudflare | CDN, WAF, DDoS mitigation | Global |
| Stripe | Tokenized payment processing | EU 路 US |
| Twilio | SMS 路 WhatsApp infrastructure | Global |
| OpenAI | Optional AI inference (opt-in) | US |
| Anthropic | Optional AI inference (opt-in) | US 路 EU |
| Datadog | Observability and logging | EU 路 US |
| Vercel | Static asset delivery | Global edge |
| Postmark | Transactional email delivery | US |
| Sentry | Error monitoring | EU 路 US |
Found a security issue? Email [email protected]. We acknowledge within 24 hours, triage within 72, and pay bounties for in-scope findings.
Acknowledgement
< 24 hours
Triage
< 72 hours
Bounty range
$200 - $25,000
Privacy, terms, DPA, SCCs, and our public Trust Center: request signed copies for procurement.
Procurement questions, security questionnaires, or
custom data residency: we are here to help.
More messages, less mess.
Everything you need to know about ChatinFlow: from setup to security. Open a topic on the right as you scroll.