Security
How practice data is protected.
Database
Practice data is stored in Supabase Postgres. Row-level security limits access to the organisation a record belongs to.
Where it is hosted
Production data is hosted in the EU (Ireland).
Encryption in transit
Flumin is served over HTTPS, so data is encrypted in transit.
Who can see what
Access is role-based. Within an organisation, admins, consultants, and clients do not see the same records. Platform super admins are a separate role.
Super admins must use two-factor authentication before they can act in that role. An organisation can also require two-factor authentication for its staff.
Payments
Card payments are handled by Stripe. Flumin does not store card numbers.
Subprocessors
Service providers that process personal data are covered in the privacy policy.
Report an issue
Report a security issue to support@flumin.co.