US Office
14675 Dallas Parkway Suite 120
Dallas, TX 75254
Secure, scalable & super reliable
We earn the trust of our customers by making data security our top priority.
Leading enterprises & agencies use Ziflow
Compliance & Certifications
Privacy and data-protection you can count on.
Ziflow has completed a third-party SOC 2 Type II audit. Our continued SOC 2 certification ensures our organizational and technology controls are independently audited at least annually.
Ziflow is a member of the Privacy Shield framework. Privacy Shield is an agreement between the EU and US that allows for the transfer of personal data from the EU to the US.
Ziflow is GDPR compliant. GDPR expands the privacy rights granted to European individuals and requires certain companies that process the personal data of European individuals to comply with a new set of regulations.
Amazon Web Services
Ziflow is hosted with Amazon Web Services (AWS), providing security features built-in. Our team uses AWS best practices to further harden our systems and processes. Amazon employs a robust physical security program with multiple certifications, including SOC 1 & 2.
Crowdstrike
Ziflow partners with Crowdstrike which provides a comprehensive and automated malware detection service for files uploaded to the service by users, ensuring that foreign files uploaded to the service are not infected. In addition, we have a blocklist containing a list of forbidden file extensions. The file extension blocklist contains file types that may be considered dangerous, such as executables. By blocking these file types, we reduce the risk of malware infection significantly.
Network Intrusion Detection System
Network Intrusion Detection System (NIDS) sensors are used in tandem with native AWS security services, which are enabled for all production assets.
Reliability you can count on
Data Redundancy
Our platform is hosted across multiple availability zones. We run a separate disaster recovery instance of Ziflow which is always at the ready.
24/7 monitoring
Extensive performance and availability monitoring allows us to keep a close eye on system health and mitigate unforeseen issues early on.
99.99% Uptime
Uptime is as mission critical to us as it is to your business. Our internal uptime goal is 99.99%, and our 2022 uptime record is 100%.
Security features for the Enterprise
Our Enterprise edition gives you all the security needed to deploy at scale.
Single Sign-on
Easily authenticate and manage your enterprise users at scale.
System of record
Maintain activity logs for any period time or export projects for your records.
Advanced Admin controls
Administrators gain full control over their team, content and systems permissions.
-
Passwords
We never store passwords in clear text - they are always hashed and salted securely using bcrypt. Bcrypt is a proven algorithm and is considered one of the best choices for password storage.
-
Encryption at rest
Data at rest is encrypted using AES-256. Encryption keys are stored using AWS Key Management Service (KMS). An annually rotated customer master key (CMK) is currently used to encrypt all customer data submitted to the Ziflow service and processed on their behalf.
-
Encryption in transit
All network communication uses TLS with at least 128-bit AES encryption. The connection uses TLS v1.2, and it is encrypted and authenticated using AES_128_GCM and uses ECDHE_RSA as the key exchange mechanism. Qualys SSL Labs scored Ziflow’s TLS configuration A+ on their SSL Server test and we regularly monitor this score.
Secure product development