Protecting your business data is part of how BonusFlow is built. Here's a plain-English look at how we keep it safe.
Traffic to and from BonusFlow is encrypted with TLS. Backups are encrypted before storage, and sensitive settings are stored encrypted rather than in plain text.
Each customer's data is separated at the data layer. One workspace can't see another's mail, contacts or files.
BonusFlow runs on EU-hosted servers behind a firewall, with administrative access locked down to key-based access only (no password logins) and modern security headers enforced on every request.
Uploaded files are checked by their actual content, not just their file name, and dangerous or disguised file types are rejected, so malicious files don't make it into your workspace or back out to anyone else.
Encrypted backups are taken regularly and kept off-site on separate EU infrastructure, and we test that they actually restore, because a backup you've never restored isn't really a backup.
Important actions are recorded, and our Scale plan adds append-only audit logs for teams that need an evidence trail for auditors or regulators.
Found something that looks like a security issue? We want to hear from you. Email security@bonusflow.eu and we'll respond quickly.
Book a 20-minute setup call, or send us a note, we'll map your costs and set it all up for you.
Fill this in and it lands straight with us in the app, we'll map your costs and show you the one-bill version. No bots, no phone tree.
Pick a slot and we'll call you to map your costs, show the one-bill version and set everything up. Suggested time is tomorrow, adjust if it doesn't suit.