Security at MockFlow
How MockFlow protects your boards: SOC 2 certified infrastructure such as AWS and MongoDB, firewalls, monitoring, encryption, backups and secure development.
MockFlow is the visual canvas where teams plan products, map processes and design screens, so the boards you create often hold your most important ideas. Security is built into every layer of the service, from the servers that host your boards to the way the product is developed and the controls your admins use.
Secure cloud infrastructure
SOC 2 certified infrastructure: MockFlow runs on SOC 2 certified infrastructure such as Amazon Web Services (AWS) and MongoDB. MFA, key rotation, VPN access and other safeguards protect the servers.
Firewalls: network and application level firewalls guard MockFlow, with intrusion detection and alerts.
Monitoring: every server is monitored each minute for anomalies.
Data protection and encryption
Every transfer between your browser and MockFlow uses HTTPS, and sensitive information such as passwords is encrypted with a 256-bit key. Customer data is backed up continuously to separate locations. See How MockFlow encrypts your data and Where your data is stored and how it is backed up.
No AI training on your data
MockFlow never uses your boards, prompts, files or chats to train AI models, and never sends them to anyone for AI training, not even in an anonymized form. This applies on every plan, including Basic. See How Mida and AI features handle your data.
Protection against common attacks
Application level security guards MockFlow against attacks such as SQL injection and cross-site scripting (XSS):
Strict content security policies
Regular web application vulnerability scans
OWASP Top 10 validation
Checks with Qualys and Mozilla Observatory
Network vulnerability testing with Qualys and AWS Detective
Secure development
Security starts in how MockFlow is built. Every change goes through peer code review, and testing at the branch, integration and deployment stages catches issues before they ship. Third party libraries are kept current with security patches, and everyone on the MockFlow team is trained in secure coding, testing and deployment.
Compliance
MockFlow was previously certified for SOC 2 Type II and ISO 27001, and a new SOC 2 Type II audit is under way. See SOC 2 and ISO 27001 compliance.