Security and trust

Your signature on everything that leaves.

Hoppflow is built so nothing reaches the outside world without a person approving it. It is not a setting you switch on. It is the only path that exists.

Nothing sends without your approvalIt cannot be sent twiceEvery action on the recordNever used to train AI

In your control

What happens when Hoppflow wants to send something.

Five steps, in order, every time. The one in the middle is you, and you can try it yourself.

Held in the queue

Every send, invite and write waits. That is the default, not a setting.

One dispatcher

Every approved external send leaves through the same code path, and it dispatches exactly once.

Your approval

Nothing moves past this point without a person.

Sent once, or not at all

Two people can approve the same thing in the same instant and it still goes out once.

On the record

What happened, who approved it, when. Still there in six months.

Try it

Needs you4High risk 1

Renewal follow-upReviewHigh risk
Your renewal, and the pricing we discussed
To3 accounts·Due in 2h
Following our call, I have kept your current rate for the coming year and included onboarding for the two new seats. The terms are attached.
Call notes, Mar 3Current contract
Weekly customer updateReview
What shipped, and what is next
ToCustomers·Due tomorrow
Kickoff inviteReview
Thursday, 30 minutes, agenda attached
ToProject team·Due in 5h
Standup summaryReview
Three blockers, one needs a decision
To#product·Due in 1d

Your data

It stays yours.

Kept apart

Isolated from every other company, and tested before each release.

Encrypted

In transit and at rest. Credentials held separately from the workers.

Private by default

What you connect stays yours until you choose to share it.

Revocable

Disconnect it and Hoppflow's access ends.

Never trains AI

Not used for training, by us or by the model providers we run on.

Yours to take

Export whenever you like. Deletion is a single request.

Access

Closed by default.

Who can do what

Roles decide who can see, run and approve each part of the workspace. Access is something you grant, never something you have to remember to take away.

What gets near your company

Every connector is checked against the official registry before it ships, and anything that can write is queued like everything else. A write is never run inline.

Enterprise

Scoped with you, not sold from a list.

If your organisation needs single sign-on, its own deployment, a specific data arrangement, or a defined support commitment, that is the conversation we have before you sign anything.

Talk to us

Found a security issue? Report it responsibly at security@hoppflow.com.

Security questions? Talk to us.

Tell us what your team needs and we will walk you through it.

Talk to us

Security and trust

Your signature on everything that leaves.

Hoppflow is built so nothing reaches the outside world without a person approving it. It is not a setting you switch on. It is the only path that exists.

Nothing sends without your approvalIt cannot be sent twiceEvery action on the recordNever used to train AI

In your control

What happens when Hoppflow wants to send something.

Five steps, in order, every time. The one in the middle is you, and you can try it yourself.

Held in the queue

Every send, invite and write waits. That is the default, not a setting.

One dispatcher

Every approved external send leaves through the same code path, and it dispatches exactly once.

Your approval

Nothing moves past this point without a person.

Sent once, or not at all

Two people can approve the same thing in the same instant and it still goes out once.

On the record

What happened, who approved it, when. Still there in six months.

Try it

Needs you4High risk 1

Renewal follow-upReviewHigh risk
Your renewal, and the pricing we discussed
To3 accounts·Due in 2h
Following our call, I have kept your current rate for the coming year and included onboarding for the two new seats. The terms are attached.
Call notes, Mar 3Current contract
Weekly customer updateReview
What shipped, and what is next
ToCustomers·Due tomorrow
Kickoff inviteReview
Thursday, 30 minutes, agenda attached
ToProject team·Due in 5h
Standup summaryReview
Three blockers, one needs a decision
To#product·Due in 1d

Your data

It stays yours.

Kept apart

Isolated from every other company, and tested before each release.

Encrypted

In transit and at rest. Credentials held separately from the workers.

Private by default

What you connect stays yours until you choose to share it.

Revocable

Disconnect it and Hoppflow's access ends.

Never trains AI

Not used for training, by us or by the model providers we run on.

Yours to take

Export whenever you like. Deletion is a single request.

Access

Closed by default.

Who can do what

Roles decide who can see, run and approve each part of the workspace. Access is something you grant, never something you have to remember to take away.

What gets near your company

Every connector is checked against the official registry before it ships, and anything that can write is queued like everything else. A write is never run inline.

Enterprise

Scoped with you, not sold from a list.

If your organisation needs single sign-on, its own deployment, a specific data arrangement, or a defined support commitment, that is the conversation we have before you sign anything.

Talk to us

Found a security issue? Report it responsibly at security@hoppflow.com.

Security questions? Talk to us.

Tell us what your team needs and we will walk you through it.

Talk to us