HTTPS / TLS
All traffic to eudrflow.com is served over HTTPS/TLS.
How EudrFlow protects your data
Plain-language description of the controls we actually operate today. We do not claim certifications we do not hold. Last updated 24 September 2026.
Local-first tools
Files used in the Readiness Checker and GeoJSON Validator are processed locally in your browser. Files used in those free tools are not transmitted to EudrFlow servers.
Payment card data
EudrFlow does not store full payment-card details. Payment-card handling is performed through Waffo Pancake as Merchant of Record.
Data minimization
Our analytics (Umami) are cookie-less and record only anonymous usage events — never supplier names, coordinates, file contents or personal data.
Input validation
Form endpoints validate submitted data and reject malformed or unexpected input.
What we do not claim
We do not hold SOC 2 or ISO certifications, do not describe our controls as “enterprise-grade” or “bank-level”, and do not make fixed breach-notification or encryption-at-rest promises. For security questions or reports, contact hello@eudrflow.com.