Our customers rely on TrueFlow in environments where reliability matters and errors are costly. Trust is as much our product as the technology itself. This page summarises how we govern security, quality, data protection and artificial intelligence. Detailed policies and evidence are available to customers and partners under a non-disclosure agreement as part of due diligence.
Security
We run an information security management system aligned to ISO/IEC 27001 and mapped to the NIST Cybersecurity Framework 2.0, so the same discipline serves European and international customers. Our approach includes:
- Risk-based controls, access on least-privilege and need-to-know principles, and multi-factor authentication.
- Encryption of data in transit and at rest where appropriate, with logging and monitoring.
- Secure development, supplier due diligence, and a defined incident-response process.
Responsible AI
AI is our core product, so we govern it deliberately, against the EU AI Act, the NIST AI Risk Management Framework and ISO/IEC 42001. Our commitments:
- Human oversight. Our agents support decisions; they do not replace the judgement of a qualified professional in safety-critical settings.
- Accountability. A named human is accountable for every AI system in operation.
- Validation. Systems are validated against defined criteria before deployment and monitored for drift in use.
- Transparency. You know when you are interacting with AI, and what it is for. See our AI Transparency & Disclosure statement.
- Separation of control. Control and authorisation data are kept separate from, and read-only to, the AI.
Data protection & sovereignty
We handle personal data in line with the GDPR and the Norwegian Personal Data Act, as set out in our Privacy Policy. Consistent with our sovereign approach, data is by default kept within the EEA, and our hosting and architecture are designed to keep customer data under European control.
Quality
We operate a quality management system aligned to ISO 9001, as part of an integrated Quality, Health, Safety, Security and Environment (QHSSE) approach. We build quality into our products and processes rather than inspecting it in afterwards, keep a competent human accountable for quality decisions, and improve continually on the basis of evidence.
Working with us
For security questionnaires, data-processing agreements, or detailed policy documentation as part of a procurement or due-diligence process, contact hello@trueflowtechnologies.com. We are glad to share our full documentation under an appropriate agreement.