Trust
AuditFlo is a compliance platform, security isn't an afterthought, it's the product. Here's exactly how we protect your data.
All data is encrypted in transit using TLS 1.2+ and at rest using AES-256. Sensitive values, including integration credentials and webhook URLs, are additionally encrypted at the application layer using AES-256-GCM before being stored in the database.
AuditFlo is hosted on DigitalOcean infrastructure in the NYC region. Object storage (evidence files, policy documents, vendor reports) uses Cloudflare R2. All infrastructure is provisioned with the principle of least privilege.
Role-based access control with four tenant roles: Admin, Compliance, Engineer, and Auditor (read-only). Multi-factor authentication is available and recommended for all users. Platform admin access uses a separate authentication system isolated from tenant sessions.
AuditFlo enforces HTTP security headers including HSTS, X-Frame-Options: DENY, Content-Security-Policy with per-request nonces, and Referrer-Policy. All API routes validate sessions, enforce tenant scoping, and validate inputs with Zod schemas before processing.
All significant actions, data access, configuration changes, user management, integration events, are written to an immutable audit log with actor, timestamp, IP address, and context. Logs are retained per your plan's retention policy.
Evidence files stored in R2 are automatically purged by our weekly retention worker according to your plan's retention policy. On subscription cancellation, all tenant data is retained in read-only mode for 90 days and then permanently deleted from all storage systems.
The PostgreSQL database is backed up daily with point-in-time recovery available. Cloudflare R2 provides built-in durability for stored files. Recovery procedures are tested regularly.
AuditFlo maintains an incident response plan with defined severity levels and response SLAs. In the event of a personal data breach, affected Customers will be notified within 72 hours in accordance with GDPR Article 33 obligations.
AuditFlo uses a limited set of sub-processors: Neon (database), Cloudflare R2 (object storage), Stripe (billing), Resend (transactional email). All sub-processors are contractually bound to appropriate data protection standards.
We welcome reports of security vulnerabilities from the security community. Use the contact form below to submit a report. We commit to acknowledging reports within 48 hours and providing regular updates on our remediation progress. We do not pursue legal action against good-faith researchers.
For security questions, vulnerability reports, or to request our full security documentation, use the form below or review our Data Processing Addendum.