Security and Compliance policy
Security by design, RBAC and end-to-end encryption.
1. Architecture and DevSecOps
FlowMan.net builds security in from the design stage (Shift-Left). Our infrastructure ensures full traceability and relies on a modern cloud architecture, essential to meet the regulatory constraints of demanding sectors (such as banking).
2. Workspace-specific security measures
- DiscoveryMan — The “magic links” generated for the interactive restitution of framings (In-App Pitch, PDF) are secured and subject to strict access controls to prevent public exposure of product strategies.
- DeliveryMan — Integration with third-party tools (such as Jira or Azure DevOps via the “Zero-to-Sprint” feature) relies on secure authentication protocols with permissions limited to what is strictly necessary (principle of least privilege).
- MaturityMan — The platform creates “Snapshots” (immutable point-in-time copies) of assessment campaigns. This data is protected against any alteration, guaranteeing audit integrity for governance functions.
- PlaybookMan — Role-based access control (RBAC) is rigorously enforced. Only authorised profiles (e.g. Strategic Portfolio Manager, Agile Coach) have the privileges required to change the Target Operating Model (TOM) architecture.
- SynergyMan — The interface connecting strategic objectives to operational execution undergoes regular security audits, with data encrypted at rest and in transit, ensuring full protection of your portfolio governance.
Audience measurement (PostHog, EU) only with your consent. No advertising cookies.We use cookies required for the site to work and, with your consent, audience-measurement cookies (PostHog, hosted in the EU) to improve FlowMan.net. No advertising cookies. Cookie policy
Hosting scripts (performance, network security) stay active as they are required for the service.Some scripts tied to the hosting infrastructure (performance and network security) remain active: they are required for the service to work and are not subject to consent.