Marketing-site boundary
This site accepts structured text through a validated request form and stores it in a private D1 database. It does not offer user accounts, payments, product credentials, file uploads, test execution, repository connections, external embeds, or analytics.
What we do not claim
FlowPoint AI does not claim a security certification, SOC 2 or ISO status, independent penetration test, bug-bounty program, encryption guarantee, data residency, formal response time, or service-level agreement.
Responsible reporting
Use Contact → Privacy request and choose a concise description of the affected URL, observed behavior, steps to reproduce, and potential impact. Do not include live credentials, personal data, destructive payloads, or another party’s confidential information.
Testing rules
Do not access, modify, delete, or download other people’s data; degrade availability; automate high-volume requests; use social engineering; test third-party services; or continue after demonstrating a minimal proof. A report does not grant permission for broader testing.
Future product security
A future testing service may process application credentials, screenshots, logs, network traces, builds, and results inside hosted execution environments. Before any pilot, the separate agreement must define credential handling, environment lifecycle, access roles, providers, retention, deletion, incident contacts, and human approvals.
No guaranteed response window
We may acknowledge and investigate good-faith reports, but no response or remediation timeframe is promised. If an issue creates immediate risk, stop testing and submit the minimum information needed to identify it.
Implementation and policy consistency review
These materials were reviewed against the implemented forms, storage, cookies, routes, and product claims. That review is not a lawyer’s approval and does not guarantee compliance in every jurisdiction.