Security

Your business data, kept private and yours

RushFlow is built so each business is isolated, access is controlled, and your data is recoverable. Here is how — described honestly, without claiming certifications we do not hold.

How your data is protected

Isolated per business

Every business runs as its own isolated tenant, separated from every other business on the platform.

Role-based access

You decide who can see and do what. Permissions are role-based and managed by you, down to outlet-scoped cashier logins.

Encrypted in transit

Traffic is served over HTTPS, and the platform sits behind a CDN/WAF that filters malicious requests.

Backups & recovery

Full-system backups (database and files) plus optional automatic encrypted cloud backups keep your data recoverable.

Authentication controls

Secure sign-in with support for two-factor authentication, and session controls that revoke access on password change.

Your data stays yours

Self-service data export lets owners take their business data out at any time.

Honest about compliance

We describe what RushFlow actually does and do not claim certifications we have not earned. Where a feature supports a regulatory workflow — for example VAT or sales tax — we say it is designed to support that workflow rather than implying formal compliance. If you need specific documentation for a procurement or audit process, contact us and we will tell you exactly what is available.

Security questions

How is my data protected?+
RushFlow runs each business in an isolated tenant, behind authenticated access with role-based permissions. Traffic is served over HTTPS and the platform sits behind a CDN/WAF.
Are there backups?+
Yes. RushFlow supports full-system backups (database and files) and optional automatic encrypted cloud backups.
Who can access my business data?+
Access is controlled by role-based permissions you manage, and each business tenant is isolated from others.
Do you have formal certifications like SOC 2 or ISO 27001?+
We describe our security practices honestly and do not claim certifications we do not hold. If you need specific compliance documentation, contact us and we will tell you exactly what is available.

Found a security issue? Please contact us so we can address it quickly.