# Superflow security and privacy

> Superflow is SOC 2 Type II compliant, encrypts data in transit and at rest, offers SAML SSO on Enterprise, and does not train models on customer content.

This is the Markdown copy of https://usesuperflow.ai/security, published for AI agents and scripts. The HTML page is canonical.

## Key facts

| Field | Value |
| --- | --- |
| Page type | Security and compliance page |
| URL | https://usesuperflow.ai/security |
| SOC 2 | Type II, monitored continuously and audited annually by a third party |
| GDPR | Supported |
| Encryption | In transit and at rest |
| SSO | SAML-based, with SCIM provisioning, on the Enterprise plan |
| Model training on customer data | No |

## What this page covers

The controls Superflow operates, how compliance is monitored and evidenced, and how customer data is stored and handled. Read the full page for the current attestation status and the sub-processor list.

## Related documents

- Privacy policy: https://usesuperflow.ai/privacy
- Terms of service: https://usesuperflow.ai/terms

## About Superflow

Superflow is a website and creative-asset review tool. Its agents watch every page of a site, report what changed, and route findings to the people who approve them. Teams leave contextual feedback on live sites, staging environments, PDFs, images, videos, and Lottie animations, and comments sync two-way with Asana, ClickUp, Monday, Slack, Webflow, and Google Tag Manager.

Machine-readable entry points:

- Site index: https://usesuperflow.ai/llms.txt
- Full site content in one fetch: https://usesuperflow.ai/llms-full.txt
- Free tools, with a Markdown copy of each: https://usesuperflow.ai/tools.md
- MCP server (Streamable HTTP, no account and no API key): https://usesuperflow.ai/api/mcp
- Agent card: https://usesuperflow.ai/.well-known/agent-card.json