Security

Security and trust are foundational to SynTerra FlowAI. This page summarises how we protect your data and the controls we operate.

Swiss data residency

SynTerra FlowAI is designed for Swiss and European data-residency requirements, with Swiss-hosted deployment options planned for enterprise customers. Processing is designed to comply with the GDPR and the Swiss Federal Act on Data Protection (FADP).

Encryption

Data is encrypted in transit using TLS and at rest using industry-standard encryption. Access to production systems is restricted and logged.

Access control

The Service enforces role-based access controls and single sign-on (SSO) on enterprise plans, so administrators can scope who can view, edit, and approve contracts.

Compliance roadmap

SOC 2 Type II and ISO 27001 certifications are in progress. We follow an enterprise-grade control framework and will publish certification status as it is achieved.

AI and your data

Contract content you process through FlowAI is used solely to deliver the Service to you. It is never used to train third-party AI models.

Reporting and contact

To report a security issue or request a Data Processing Agreement (DPA), contact info@synterraai.com.