For the full security and privacy overview, start at the Floral Trust Portal. Floral stores its main application records in Frankfurt, Germany. When you use a feature that needs another service, Floral sends that service the data needed for the task. The subprocessor list names each provider and its purpose.

Customer content

• Microsoft Azure OpenAI receives selected prompts and text for AI features. Floral uses a Sweden Central resource with EU Data Zone inference. Necessary abuse review may take place elsewhere in the EEA.
• Recall processes online meeting recordings and calendar data in Frankfurt. Good Tape handles in-person transcription in the EU. LlamaParse processes documents through an EU endpoint.
• Cloudflare R2 stores temporary audio and source files in EU-jurisdiction storage.
• Mailgun receives the complete forwarded calendar invitation, including attachments, before Floral filters it. That message and related event data stay in Mailgun's EU region for no more than three days. When Events is enabled, Mailgun also sends participant notices from the EU region.
• Braintrust is planned for AI tracing and quality evaluation. Production customer-content tracing is not enabled. When enabled, all customer data sent to Braintrust, including prompts, outputs and traces, will stay in Europe for no more than 14 days.

Other data

Clerk handles sign-in and account data in the United States. Stripe handles billing data in Ireland and the United States. PostHog receives limited product-use data in its EU cloud and support messages when you use in-app support. Sentry stores technical error data in Germany. Firecrawl fetches websites selected as knowledge sources and public event pages; its servers are in the United States. Perplexity handles public company research in the United States. Web pages can contain names or contact details.

Connections you choose

You can connect services such as a calendar or CRM. The integration guide explains the access each connection needs. Your agreement with the connected service also applies.

For the transfer safeguards and provider schedule that apply to your organisation, ask [email protected].