Security at DeelFlow
Last updated: 28 June 2026
Negotiations contain some of the most sensitive information a business has — pricing floors, walk-away limits, and private strategy. Security isn't a feature at DeelFlow; it's the foundation. Here's how we protect your data.
All traffic is protected with HTTPS/TLS.
You only ever see negotiations you're a participant in.
Your private AI notes and limits are never shared with the other side.
We are building toward SOC 2 Type II. The controls below already follow that framework; formal attestation is in progress.
Data protection
- Encryption in transit — all connections use HTTPS/TLS. Data is encrypted at rest by our infrastructure providers.
- Row-level security (RLS) — enforced at the database layer so access is scoped to the negotiations and companies you belong to, not just hidden in the UI.
- Private AI isolation — your deal goals, walk-away price, strategy, and private notes are stored separately from public room messages and are never transmitted to the counterparty.
Access & authentication
- Authentication is handled by a dedicated identity provider; passwords are stored only as salted hashes.
- Two-factor authentication and recovery codes are available to protect accounts.
- Workspace roles (Admin, Manager, Negotiator, Viewer) enforce least-privilege access to sensitive actions.
- Login history and active sessions are visible so you can spot and revoke unexpected access.
Auditability
Sensitive workspace actions are recorded to an immutable audit log so administrators can review who did what and when. Negotiation rooms also keep a per-deal activity timeline for full traceability.
Infrastructure & sub-processors
We host on vetted, industry-standard providers (Supabase for database and auth, Vercel for application hosting, Resend for transactional email). See our Privacy Policy for the full sub-processor list and our Data Processing Agreement for contractual data-protection terms.
Responsible disclosure
Found a vulnerability? We appreciate responsible disclosure. Email security@deelflow.dev and we'll work with you to verify and resolve it quickly.