FolderFlow Legal
Security Policy
Effective date: July 5, 2026
FolderFlow applies technical and organizational controls to protect confidentiality, integrity, and availability of customer data.
Security Controls
- Authentication and authorization checks on protected APIs.
- Tenant/team scoping for storage, activity, and metadata access.
- Audit logging for sensitive administrative and collaboration events.
- Encryption in transit and secure infrastructure provider controls.
- Monitoring and alerting for suspicious activity patterns.
Incident Response
We investigate security incidents promptly, mitigate impact, and provide required notifications under applicable law and contractual obligations.
Responsible Disclosure
Report vulnerabilities responsibly to contact@folderflowapp.com. Please include reproduction steps and impact details.