Get StartedFree for 30 days. No card required.
Terms & Policies

GDPR Commitment

Our commitment to helping customers comply with GDPR.

Updated: January 1, 2020

Our Commitment to You and the Protection of Your Data

We’re committed to helping Flow customers and users understand, and where applicable, comply with the General Data Protection Regulation (GDPR). The GDPR is the most comprehensive EU data privacy law in decades and went into effect on May 25, 2018.

Besides strengthening and standardizing user data privacy across the EU nations, it introduces new or additional obligations on all organizations that handle EU citizens’ personal data, regardless of where the organizations are located. On this page, we explain how we help our customers comply with the GDPR.

GDPR Compliance

The GDPR’s updated requirements are significant and our global team has adapted Flow’s products, operations, and contractual commitments to help customers comply with the regulation. Measures we have implemented include:

  • Investments in our security infrastructure
  • Updates to relevant contractual terms
  • Offering data portability and data management tools including:

    • Import and export tools. Businesses and organizations may access, import, and export their Customer Data using Flow’s tools.
    • Profile deletion tool. Help customers respond to user requests to delete personal information, such as names and email addresses, from a Flow account.
    • Organization settings center. See your organization’s plan and settings, or contact an admin who controls the workspace.

We also monitor the guidance around GDPR compliance from privacy-related regulatory bodies, and update our product features and contractual commitments accordingly.

Our Security Infrastructure

Protecting our customers’ information and their users’ privacy is extremely important to us. As a cloud-based company entrusted with some of our customers’ most valuable data, we’ve set high standards for security.

Flow has invested heavily in building a robust security team, one that can handle a variety of issues — everything from threat detection to building new tools. In accordance with GDPR requirements around security incident notifications, Flow will continue to meet its obligations and offer contractual assurances.

If you’d like to learn more about Flow’s security policies and procedures, please see our security page. It provides detailed information on how we approach security and ensure user data security.


Fulfilling our privacy and data security commitments is important to us. So we’re glad to comply and help you comply with the GDPR. If you have any questions about your rights under the GDPR as a User or how Flow can help you with compliance as a Customer, we hope you’ll reach out to us at


Learn more about our terms, policies, and GDPR by exploring the following resources: