Trust & security
Built for teams that get audited
Wiseflow holds identity documents, ownership data and decision records for regulated businesses. The controls below are core to how the platform is built, not features layered on afterwards.
Controls
How your data is protected
Tenant isolation
Every record is scoped to an account. Data cannot be read across customer boundaries, and isolation is enforced at the data access layer rather than in application logic alone.
Separate sandbox and production
Test and live data are held in separate environments. Sandbox activity can never reach production records, so teams can trial workflows against safe data.
Role-based access control
Granular permissions across every resource and action, so reviewers, administrators and API consumers each hold only the access their role requires.
Complete audit logging
Every state-changing operation is recorded with the acting user, the timestamp and the before and after state. Audit records are retained and exportable.
Single sign-on
Enterprise SSO so access follows your existing identity provider, joiner-mover-leaver process and authentication policy.
Data residency
UK and EU hosting, with customer data kept in region. Sub-processors are documented and available for review under NDA.
Data protection
Processing personal data on your instructions
Where Wiseflow processes personal data on your behalf, we act as processor and you remain controller. Our data processing agreement, records of processing and sub-processor list are available on request, along with our approach to retention, deletion and data subject requests.
Security questionnaires, penetration test summaries and current certification status are shared with prospective customers under NDA. Email security@wiseflow.ai and we will send the full pack.
Reporting a vulnerability
Responsible disclosure
If you believe you have found a security vulnerability in Wiseflow, please report it to security@wiseflow.ai. We aim to acknowledge reports within one working day and will keep you updated until the issue is resolved. Please do not disclose the issue publicly until we have had a chance to address it.
Ready to reduce the time and cost of onboarding?
See how Wiseflow can turn your current process into one connected journey.