Trust Center
Security and GDPR, when the buyer asks for more than promises
Here FlowDule brings together the public descriptions of security, GDPR, access, logging and data management, so teams, clinics and chains can assess the platform more quickly.
Trust has to be verifiable in the real workflows
Booking, journals, payments, messages and access control have to fit together if the platform is to work in practice for several roles and locations.
The Trust Center brings together the areas most often asked about in the sales and approval process: access, separation between businesses, audit logs, GDPR processes and data handling over time.
Seven areas in the Trust Center
- 01
Security and role-based access
Get an overview of how access, logging, traceability and separation between businesses and locations are publicly described today.
See security - 02
GDPR, consents and operational policies
See how consents, policies and documentation are built into the workflows around booking, journals and communication.
See GDPR & policies - 03
Website booking and setup per business
See how the booking widget, the booking page and setup per business via a unique address code fit together.
See website integration - 04
Retention and deletion of journal data
See how the customer's documented profile determines how long journals are kept, what happens on a deletion request, and how backups are phased out through documented rotation.
See journal data - 05
Retention of other data
See what determines the time limits for bookings, payments, logs and account data, and which starting points and deletion actions the customer's retention profile must cover.
See retention - 06
Technical and organisational measures
The public summary of the Article 32 measures: access, separation between chains, encryption, traceability and operations. The binding level of security is set out in the accepted, version-bound TOMs annex.
See measures - 07
How FlowDule uses AI
Which AI services the platform uses in the journal and for translation, that client and journal data are not used for model training, and which AI results are drafts that the practitioner checks before they go into the journal.
See AI transparency
Public control areas
From separation between businesses to the data lifecycle
The Trust Center brings together the control areas that typically decide whether a platform can be used across teams and locations: role-based access, audit logs, consents, export and retention, and which materials are publicly described and which are reviewed in dialogue.
Read about GDPR workflowsJournals, AI support and responsibility
AI assists, people decide
AI helps with structure, drafts and summaries. AI output is a draft that the practitioner reads, corrects and is responsible for, and AI does not write to the journal on its own.
See journals & notesRole-based access and traceability
Journals require role-based access, and important changes must be traceable. Roles only see what they need.
See securityConsents, export and data management
Consents, export and data management are part of the workflow around journals, not a separate compliance project.
See GDPR & policies
A better starting point for evaluation
Clinics and chains
Use the Trust Center together with the solution for clinics and chains when management, access and responsibility, locations and central control need to be assessed together.
See the solutionSecurity in depth
Dive into the security architecture: encryption, separation between businesses, role-based access, audit logs and multi-factor authentication.
See securityA concrete review
The data processing agreement and the list of sub-processors are public under Legal. If you need a more concrete review of the controls, we do it in writing. You do not need to book a meeting to move forward.
Contact us
Legal documents
The Trust Center explains in plain language how FlowDule works. The binding texts are in the legal documents. All current documents have a date and a version.
- Terms of ServiceSubscription, payment, liability, termination and Data Act switching.
- Data Processing AgreementProcessing on the customer's behalf and the customer's documented instructions.
- Security descriptionThe public description of the platform's security.
- Sub-processors and suppliersThe accepted chain of suppliers and transfers.
- Privacy PolicyFlowDule's own processing as data controller.
- All documentsCookie policy, company information and the other documents.
Next step
Review FlowDule with the right combination of documentation and context
Create a free account and review for yourself the roles, locations, logging, GDPR processes and the Trust Center material that is relevant to your evaluation. Try FlowDule for 30 days. No credit card, no commitment.