How ModaFlow.ai keeps your wholesale data secure
ModaFlow.ai keeps each fashion brand's prices, buyer lists and unreleased styles separate from other brands, encrypted in transit and at rest, and hosted with SOC 2 Type II providers.
On this page
Security at every layer
Row-level security on every table
Every table in the ModaFlow.ai database has row-level security, so a signed-in team can only read and change its own brand's styles, orders and buyers.
Encryption in transit and at rest
Connections to the app and to the database use TLS 1.2 or higher, and the database and uploaded files are encrypted at rest with AES-256.
SOC 2 Type II providers
Your data lives in a Supabase Postgres database on AWS in us-east-1 (N. Virginia), and the app runs on Vercel in Washington, D.C. (iad1). Both providers hold SOC 2 Type II reports.
GDPR compliant
Full GDPR compliance with data export, deletion, and processing agreements.
Card payments by Stripe
Brands and buyers pay by card on Stripe's own checkout and invoice pages, so card numbers never reach ModaFlow.ai. Stripe is certified as a PCI DSS Level 1 service provider.
An audit log no one can rewrite
Changes to orders, buyers, styles and lookbooks are recorded with who made them and when, under Settings → Audit log, and no one on your team can edit or delete that history.
Our security commitments
- No employee access to your data without explicit permission
- Automatic backups with point-in-time recovery
- Team roles: a Viewer can see your catalog and orders but can't change them
- Password-protected lookbook links, with each password stored only as a hash