Optimize my app
Security

Your data security is our priority.

Fload is built with enterprise-grade security from the ground up. We protect your app analytics data with industry-leading encryption, access controls, and compliance standards.

Data encryption

Encrypted in transit and at rest.

All data is encrypted both in transit and at rest using industry-standard protocols.

  • Encryption at restAES-256 encryption for all stored data.
  • Encryption in transitTLS 1.3 for all data transfers.
  • Key managementHardware security modules (HSMs) for encryption key storage.
  • Database encryptionTransparent data encryption (TDE) on all database instances.
Access controls

Only authorized people get in.

Fload implements strict access controls to ensure only authorized users can access your data.

  • Per role

    Role-based access control (RBAC)

    Granular permissions for team members.

  • Required

    Multi-factor authentication (MFA)

    Required for all account access.

  • SAML 2.0 · OAuth 2.0

    SSO support

    Enterprise single sign-on via SAML 2.0 and OAuth 2.0.

  • Auto timeout

    Session management

    Automatic session timeout and device tracking.

  • Scoped · rotated

    API key management

    Scoped API keys with rotation policies.

Compliance

Working toward SOC 2. Committed to GDPR.

SOC 2 Type II

In progress

Fload is actively pursuing SOC 2 Type II certification. Our security practices are designed to meet and exceed the Trust Services Criteria for security, availability, and confidentiality.

  • Security policies and procedures aligned with SOC 2 requirements
  • Continuous monitoring and logging of all system access
  • Regular third-party security assessments and penetration testing
  • Incident response plan with defined escalation procedures

GDPR

EU data subjects

Fload is fully committed to GDPR compliance and protecting the rights of EU data subjects.

  • Data processing agreements: Standard contractual clauses available for all customers
  • Right to access: Export all your data at any time from your dashboard
  • Right to erasure: Request complete data deletion at any time
  • Data minimization: We only collect data necessary to provide our services
  • Privacy by design: Data protection built into every feature from inception
Data retention

Kept only as long as it's needed.

We retain your data only as long as necessary to provide our services and comply with legal obligations.

Data retention
  • Active account dataFor your subscription
  • Analytics dataPer your plan settings
  • After account closureDeleted within 30 days, upon request
  • Backups90 days, encrypted, for disaster recovery
  • Audit logs1 year, access and activity
Infrastructure security

Layered, isolated and watched around the clock.

Our infrastructure is hosted on leading cloud providers with enterprise-grade security controls.

  1. EdgeDDoS protection and WAF (Web Application Firewall)
  2. NetworkNetwork isolation with private VPCs and security groups
  3. ServersAutomated vulnerability scanning and patching
  4. CloudSOC 2 certified cloud infrastructure providers
24/7 infrastructure monitoring and alertingLive

Have security questions?

Our team is ready to answer your security and compliance questions. Reach us at security@fload.com.

Email security