FlowSprite
Home›FlowSprite security — Where your data goes, encrypted how, audited where
Trust

Security & data handling

Where your data goes when you connect Salesforce and GitHub. No marketing fog.

Start free See the homepage

Your data, in plain English

In your control

Salesforce metadata in your org. Source-of-truth in your private GitHub repo. Audit log in your Git history. None of this lives in our database.

In ours

OAuth tokens (encrypted at rest, KMS-managed). Account email + team membership. Run history (which request triggered which PR). Drift hashes — not the metadata itself.

Encryption posture

01

TLS 1.2+ on every API call

No exceptions. Every Salesforce, GitHub, and FlowSprite endpoint is HTTPS only.
02

OAuth tokens encrypted at rest

Your Salesforce and GitHub OAuth tokens are encrypted at rest. We never store your passwords, and tokens are revocable at any time.
03

Sensitive headers redacted at the edge

No customer data persisted in logs. Sensitive request headers are stripped before any log enters our pipeline.
04

GitHub at-rest encryption

GitHub holds the metadata; their standard at-rest encryption applies. We don't centralize your metadata in our database.

How AI access is contained

The AI never gets a blank check. Access is scoped, revocable, and stripped of record data before it leaves your org.

01

Metadata anonymized before AI

Before metadata is sent to an AI model for analysis, it's anonymized — a k-anonymity pass strips identifying names and values. The model reasons over structure, not your customer data.
02

Record values never reach a committed report

Every analysis report is scanned before it commits. If any cell embeds a record-shaped value — an email, a formatted phone number, a Salesforce record ID — the commit fails closed rather than leak it.
03

Role-scoped, revocable MCP keys

Each MCP key carries a role (viewer through admin) and can be scoped to specific sandboxes. Effective permission is the minimum of the key's role and your plan, enforced on every request. Keys revoke instantly, rotate without downtime, and orphaned keys (creator left the org) are flagged for one-click revoke.

See the MCP

Compliance status

  • SOC 2 Type II — in progress. Email security@flowsprite.com for current status and evidence.
  • GDPR — EU data residency available on request.
  • HIPAA — not currently in scope; reach out if you need a BAA.

Need security review docs?

Email security@flowsprite.com for the data flow diagram, sub-processor list, and current SOC 2 evidence.

Email security team