Data Processing Agreement

Flowcerta's GDPR-aligned DPA, covering EU and UK transfers, Standard Contractual Clauses, and our subprocessor list, is available on request from legal@flowcerta.com. We typically reply within one business day.

The full Flowcerta security and procurement posture, including hosting regions, encryption, retention, subprocessor list, SOC 2 status, and a procurement FAQ, lives on the Security & Procurement page.