Trust and Security

No. Wordflow follows a strict zero data retention policy – your content is never used to train third-party models.

We use TLS 1.3 encryption, JWT-based authentication, and role-based access controls. Our infrastructure is optimised for 99.99% uptime.

Yes. We are compliant with GDPR, HIPAA, CCPA, and the Australian Privacy Act.

All data is stored on Australian servers and never transferred internationally unless required by law.

Yes. You can manage, export, or permanently delete your data at any time via your dashboard.

Not yet – but we’re actively building role-based access controls to help teams manage permissions for editing, reviewing, and publishing content.

Please email support@wordflow.ai immediately. We follow standard breach notification procedures aligned with GDPR and Australian law.

We are developing a public status page. In the meantime, email support for any real-time service queries.

Yes. All data is stored in Australia by default, with residency options for custom deployments available upon request.

Your data will be retained for 30 days post-deletion to allow export or recovery, after which it is permanently deleted.

Yes. Wordflow meets privacy, security, and compliance standards suitable for use in highly regulated industries.

Yes. Enterprise clients may request a signed DPA to meet compliance requirements.