/ security & data
Know where your files and data live.
A print studio's files and customer data are its business. Here is plainly what stays with you, what the portal handles, and how access and payment work.
Your network
What stays with you
With PDFlow Intelligence, the brain of your studio, installed at your studio, the work is done on your own machine.
- Files in your orders folder are processed on PDFlow IQ and are not copied to our storage.
- The data read from your business system (SAP Business One, SQL, Excel/CSV) is read by PDFlow IQ on your network.
- PDFlow IQ opens no port on your router. It connects outward, and every request to it must carry a PDFlow signature made for your server and your licence.
- Files and data you open in the portal travel to your browser encrypted (TLS). On the way they pass through Cloudflare, our network provider; PDFlow does not store them.
- Client sketches are generated and kept on the studio side; the portal holds only what it needs to show the right status.
The portal
What the portal processes
The web portal runs on PDFlow's servers, using a small set of infrastructure providers.
- Files you upload to the portal are processed to produce the output you ask for, and are accessible only to your account.
- You can ask us to delete uploaded files at any time.
- Files a producer sends while your studio is offline are held temporarily in cloud storage until the studio is back.
- Hosting, database, email delivery and networking are provided by named processors, each receiving only what it needs. They are listed in the privacy policy.
- We do not sell personal data, and use essential cookies only.
Payment
How payment works
When online payment opens, it runs through Paddle, our reseller and merchant of record.
- Card details go to Paddle. PDFlow never sees or stores them.
- Today paid plans are arranged with our team; the free trial needs no card.
Access
Who can do what
Every account has a role, and each role sees only its own area.
- New accounts are confirmed with a code sent to the owner's email address.
- Studio admins, designers, producers, production workers and production managers have separate permissions; producers and floor staff see only their own screens.
- Passwords are stored hashed, traffic is encrypted (TLS), access is scoped per studio, and administrative actions are written to an audit log.
- Clients approve a sketch through a signed link for that sketch only, with no account.
A question your IT person will ask?
No system is perfectly secure. If you have a security question or want to report a concern, write to us and a person replies.