Security
Your documents carry your customers' information. We treat them that way.
FlowDocs handles shipment and order paperwork — shippers, consignees, routes, prices and parties. Here is how that data is separated, reached and traced.
How access works.
One workspace can’t read another
Separation is enforced in the database, not just hidden in the screens.
A refused read is a 404, not a 403
Asking for a record that belongs to somebody else returns "not found". A "forbidden" would confirm the record exists, which turns any endpoint into a way to enumerate other tenants.
Documents are stored, not shared
Uploads go straight to storage over a signed URL scoped to your workspace, and download links are issued the same way.
Every record keeps its provenance
Shipment comparison results retain safe document evidence and the effective source used. A page reference is shown when it is available and is never fabricated when it is not.
Access is scoped and revocable
API access and signed webhooks are available on request; we set them up with you. API keys and webhook endpoints belong to one workspace and stop working the moment they are removed.
Encrypted in transit
The app, the API and the ingest endpoint are served over TLS only, and webhook deliveries are signed so your side can verify what it received.
Where your documents live, and for how long.
Documents are stored in Frankfurt and processed on servers in Germany.
- Stored in Frankfurt, Germany
- Files, extracted values and results are stored with Supabase in its Central EU (Frankfurt) region.
- Checked on our servers in Germany
- Documents are parsed, read and compared on servers FlowDocs runs at Hetzner in Germany.
- Two AI providers, named
- Scanned pages are read by Mistral (OCR). Text is sent to OpenAI to extract the fields. No other AI provider sees your documents.
- Never used to train AI models
- OpenAI doesn’t train on API data unless we opt in, and we haven’t. Mistral’s improvement setting is off.
- Retention
- Deleting a document moves it to Trash, where you can restore it. To remove a document for good, contact us and we'll do it. Documents in Trash are not removed automatically. To remove your whole account, contact us.
- No access to your systems
- No CargoWise, TMS, ERP or WMS credentials, and FlowDocs never writes into those systems.
The full detail, including what each processor receives, is in the privacy policy.
If you are sending us a document to try.
You can delete or paste over the names, values and routes first — FlowDocs still reads whatever is left. Use a tool that removes the text rather than a black box drawn on top: a drawn box hides it from you, not from a parser.
Questions about a specific control, or a security review to complete? Ask us directly.
Check 3 shipment packs free.
Send the commercial invoice, packing list and bill of lading or air waybill for 3 recent shipments. We review every result by hand and email you the report within 24 hours. No CargoWise, TMS or ERP access is required.
- Stored in Frankfurt, Germany
- No access to your systems
- Not used to train AI models
- Security details
You can delete or paste over the names, values and routes first — FlowDocs still reads whatever is left. Use a tool that removes the text rather than a black box drawn on top: a drawn box hides it from you, not from a parser.