Security at Keynou Flow

Your data is protected by encryption, strong authentication, role-based access, and privacy-first practices. Learn how we keep your work safe.

Trust is our foundation

When you use Keynou Flow, you trust us with your team's plans, tasks, and sometimes sensitive information. We take that responsibility seriously. Security and privacy are not afterthoughts—they are woven into how we design, build, and operate the product.

We follow industry best practices for encryption, authentication, access control, and infrastructure security. We minimize data collection, give you control over your information, and are transparent about how we use it.

For organizations with advanced needs, Keynou Flow Enterprise offers SSO, audit logs, and organization-wide permissions. Contact our sales team for a security review or compliance questionnaire.

Security areas

Encryption

All data is encrypted in transit with TLS 1.2+ and at rest using industry-standard encryption algorithms.

Authentication

Passwords are hashed with bcrypt. Optional 2FA/TOTP via authenticator apps adds an extra layer of protection.

Infrastructure

Hosted on trusted cloud providers with network isolation, automated patches, monitoring, and regular security reviews.

Compliance

GDPR-aligned privacy practices, data ownership, export, and deletion rights. Working toward SOC 2 Type II.

Privacy commitments

  • Data ownership: You own your data. We do not sell it or use it for advertising.
  • Minimal collection: We collect only what is needed to provide and improve the service.
  • Right to export: Export your boards and data at any time.
  • Right to deletion: Request account and data deletion. We process requests in accordance with applicable laws.

Read our full Privacy Policy and Terms of Service.

Need a security review?

Contact us for compliance questionnaires, security whitepapers, or to discuss Enterprise security features.