Trust Center

Welcome to the Diaflow Trust Center. Diaflow is a technology company that provides an intelligent automation platform, orchestrating cloud environments with built-in governance, compliance, and security controls. Our platform simplifies provisioning, enforces best practices, and delivers consistent operational standards, enabling organizations to scale workloads faster and with higher reliability. Our services include AI-native workflow automation, a multi-agent architecture, and productivity tools like tables, pages, and drive for file storage.

This Trust Center is designed to provide you with a clear and accessible overview of Diaflow's commitment to security and trust. Here, you will find detailed information about our security practices, policies, and certifications, demonstrating how we protect your data and maintain the integrity of our services.

Diaflow maintains a robust trust posture, underpinned by comprehensive security and operational practices. We have undergone a SOC 2 Type II examination, which attests to the suitability of the design and operating effectiveness of our controls related to Security. This report covers the period from November 14, 2025, to February 14, 2026. We also have a SOC 2 Type I report as of November 14, 2025. These reports provide assurance regarding our controls to meet the criteria related to Security set forth in the 2017 Trust Services Principles and Criteria for Security, Availability, Processing Integrity, Confidentiality, and Privacy.

Our commitment to security is further demonstrated through our operational practices. We utilize subservice organizations like AWS and Cloudflare for data center services, both of which have provided their own Independent Service Auditors Reports (SOC 2). While our examination focuses on Diaflow's controls, our responsibilities for applications and services running on these cloud services are covered by our audit.

Diaflow has established organization-wide Information Security Policies that define how our systems and data are protected. These policies cover the design and development of our services, system operations, management of internal business systems and networks, and employee hiring and training. We regularly conduct risk assessments, evaluating threats and vulnerabilities to ensure that identified risks are mitigated to acceptable levels. Management regularly reviews security levels, changes, technology trends, and incidents to continuously improve our security posture.

We are dedicated to transparency and providing you with the information you need to understand our security and compliance efforts. As you explore the rest of this Trust Center, you will find more in-depth documentation supporting these practices.