Trust & security

Your data, looked after.

Your business and your clients trust you. You can trust us with the data behind it. Here is exactly how we keep it safe.

All systems operational
100% uptime
  • WebsiteOperational
  • Booking appOperational
  • APIOperational
  • PaymentsOperational
  • NotificationsOperational

Uptime shown over the last 90 days. Live status updates are coming soon.

How we protect you

Security built in, not bolted on

The fundamentals that keep your data safe, every day.

Encrypted end to end

All data is encrypted in transit with TLS and encrypted at rest. Your information is protected on the wire and in storage.

Strict access controls

Access to systems is limited to those who need it, protected by least-privilege permissions and multi-factor authentication.

Backups and recovery

Your data is backed up regularly so it can be restored quickly if something goes wrong.

Always monitored

We monitor our systems around the clock and respond quickly to anything unusual.

Where your data lives

Clear about where your information is stored.

AppFlow runs on trusted, enterprise-grade cloud infrastructure. The website is served on Cloudflare’s global network, and your business data is stored with reputable cloud providers, encrypted at rest and in transit.

You stay in control of your data. You can export or delete it at any time, and we only ever use it to provide and improve the service, never to sell.

Hosting

Enterprise-grade cloud infrastructure with built-in DDoS protection.

Data residency

Stored in secure regions, with Australian data residency available.

Backups

Automated, regularly tested backups for fast recovery.

Access

Least-privilege access with multi-factor authentication.

Standards

Certifications and compliance

The standards we hold ourselves to, and the ones we are working toward.

Australian Privacy Principles

We handle personal information in line with the Privacy Act 1988 (Cth) and the Australian Privacy Principles.

PCI DSS through our partners

Card payments are processed by PCI DSS compliant payment providers. We never store full card numbers.

Encryption everywhere

TLS in transit and encryption at rest across our services, by default.

Building toward SOC 2 and ISO 27001

As AppFlow grows we are working toward independent SOC 2 and ISO 27001 assessments.

Need security documentation for your own review? Email hello@appflow.com.au.

Built on trust.

Run your business on a platform that takes your data as seriously as you do.

14-day free trial · Cancel anytime · No lock-in