Privacy & Security
BYOD that's fit for a bank
Enabling employees to use their own phones at work can bring big benefits – and big risks. Flip passes the stress-test from industry bodies and employee councils alike, exceeding even the strictest security and privacy requirements. You get all of the upside, with none of the downside.
Practicality meets protection
Enterprise-grade as standard
Flip meets the most rigorous enterprise requirements right out of the box. Our platform is hosted on EU servers with ISO 27001 certification, messages are stored locally, and we're regularly audited by independent third parties. You don't even have to remember what GDPR stands for (yes, we're compliant with that too).
No more shadow channels
Inaccessible tools push employees towards insecure alternatives. But with Flip, they get the intuitive experience and practical benefits of social media apps without the security dangers. Employees get what they want and need without putting personal or company data at risk.
Higher employee adoption
Equipping everyone with a company phone is difficult with large workforces. And, though most employees carry a personal phone, they're often reluctant to let employers in. Enter Mobile App Management. Employers get high adoption without losing control. Employees get convenience without the fear of being 'spied on.' Everyone wins.
Supported by works councils
Works councils needn't slow your project – they can help accelerate it. Flip was developed in partnership with frontline employees and workers' groups to come pre-fitted with the protections they care about. The app can't access personal smartphone data, collects minimal employee data, and can be muted outside of working hours.
of frontline employees admit to using private messaging apps for work
Flip Frontline Report
Privacy and data protection
How we keep your employees’ data safe
How we process your data is governed by a Data Processing Agreement – we’ll happily provide you with our template to look over. In accordance with GDPR, we comply with all requests for correction or deletion of data, or for a copy of the data we process. And to maximise your protection, we have DPAs of our own in place with all Flip data processors.
We ensure the secure processing of your data through rigorous technical and organisational measures, as outlined in the GDPR. These include (but aren't limited to) Mandatory employee security training, regular third-party audits, two-factor authentication, firewalls, virus protection, and disk encryption. We also regularly review and optimise these measures to ensure we're ahead of the latest security developments.
In a world where your data is constantly collected, connected, and sold, it's nice to know that Flip is a safe space. Flip was designed around the principle of data minimisation: collect what's necessary and nothing more. The only personal data needed to get set up is a first and last name, a user ID (e.g. email address), and a specified role (admin or user). Other information, such as a password reset email address, job title, region, or phone number, is completely optional.
Need the nitty-gritty?
You'll find extensive details and documents about how Flip keeps your company and employee data safe in our Trust Centre.
Visit Trust Centre
Certification and hosting
How we keep your company data safe
Flip processes and stores your data in an ISO 270001-certified data centre in Germany that fulfils the requirements of the Cloud Computing Compliance Controls Catalog (C5) standard. By hosting data in the Azure cloud in Germany (Frankfurt and Berlin), we ensure that it stays within the European Union – protecting data sovereignty and ensuring compliance with regional regulations.
Data transmitted between end devices and the data centre is encrypted according to the current state-of-the-art technology: TLS 1.3, RSA 2048 Bits/SHA256 with RSA, HTTP Strict Transport Security (HSTS). If that's too technical, we regularly have the security of the employee app checked by independent third parties.
Flip uses OIDC (OpenID Connect) and OAuth protocols to verify authorisation and authentication. The JSON Web Token (JWT) signature is matched by the system with the user's public key in the API gateway for each individual HTTP access.
'The app allows us to communicate directly, securely, and easily with our colleagues. And all this with our private smartphones.'
Privacy and security feature checklist
Privacy by design
Do not disturb
SSO and auto-lock
App-only access
Malware detector
Content moderation
Talk to us today!
Want more peace of mind?