How FlowNexa approaches security, data protection, Responsible AI, and support for business engagements.
Topics
A concise view of security, data handling, Responsible AI, and support. Full policy documents live in the Legal Center.
We apply least-privilege access, TLS in transit, environment-appropriate backups, and controlled change for systems FlowNexa operates. Project-specific controls are defined in contracts — we do not claim ISO or SOC certifications we do not hold.
Customer workloads are typically delivered on cloud or hybrid foundations (AWS, Azure, or Kubernetes) agreed per engagement. FlowNexa’s own public website and CMS run on hardened container platforms with monitoring and backup routines.
Website contact data is handled under our Privacy Policy. Delivery projects process customer data only as instructed in the engagement agreement. Enterprise customers may request a Data Processing Agreement during negotiation.
AI workflows are designed with knowledge boundaries, human approval for critical actions, scoped API permissions, and audit visibility. AI outputs require human review for business-critical decisions.
We do not publish a generic public uptime percentage. Availability targets, response times, and managed-service SLAs are defined in customer contracts when applicable.
Standard requests are handled during Vietnam business hours, typically within one business day. Channels and severity guidance are described in the Support Center and Support Policy.
Report security findings to platform@flownexa.ai or hello@flownexa.ai. Please avoid exploiting systems beyond responsible disclosure. See security.txt and the public Security Policy for contact preferences.
For policy documents, payment terms, and company details, visit the Legal Center
Start with a practical consultation to identify the right AI use case, required data, integration approach, risk boundaries, and MVP roadmap.
We onboard at most three new customers per month to protect delivery quality.
