Your business data, kept private and yours
RushFlow is built so each business is isolated, access is controlled, and your data is recoverable. Here is how — described honestly, without claiming certifications we do not hold.
How your data is protected
Isolated per business
Every business runs as its own isolated tenant, separated from every other business on the platform.
Role-based access
You decide who can see and do what. Permissions are role-based and managed by you, down to outlet-scoped cashier logins.
Encrypted in transit
Traffic is served over HTTPS, and the platform sits behind a CDN/WAF that filters malicious requests.
Backups & recovery
Full-system backups (database and files) plus optional automatic encrypted cloud backups keep your data recoverable.
Authentication controls
Secure sign-in with support for two-factor authentication, and session controls that revoke access on password change.
Your data stays yours
Self-service data export lets owners take their business data out at any time.
Honest about compliance
We describe what RushFlow actually does and do not claim certifications we have not earned. Where a feature supports a regulatory workflow — for example VAT or sales tax — we say it is designed to support that workflow rather than implying formal compliance. If you need specific documentation for a procurement or audit process, contact us and we will tell you exactly what is available.
Security questions
How is my data protected?+
Are there backups?+
Who can access my business data?+
Do you have formal certifications like SOC 2 or ISO 27001?+
Found a security issue? Please contact us so we can address it quickly.