Mobile DevOps plans suited for any team.

Yes, Appflow has been designed to withstand OWASP Top 10 matters such as injections, broken authentication and session management, cross-site scripting (XSS), insecure direct object references, missing function level access control, cross-site request forgery (CSRF), unvalidated redirects and forwards.

Appflow has followed security best practices since day one. We have achieved SOC 2 Type 1 certification and are actively pursuing SOC 2 Type II and EU-U.S. and Swiss-U.S. Privacy Shield certifications.

Appflow inherits 2FA authentication established in your third-party identity provider, as well as standard login with complex password requirements.

The initial account owner is added to Appflow by an Ionic Customer Success representative. Additional users can be added and managed by the account owner. Owners can create and assign “teams” to individual users that define who can access and maintain apps in Appflow.

All sensitive information is stored and transported using best-in-class encryption, such as AES-256.

Appflow is externally audited by independent cybersecurity experts, Coalfire Labs, annually.

“Authorized” cloud team personnel only.

We honor deletion requests in compliance with GDPR.

In the event of system-wide issues, customers are notified by their dedicated Customer Success Manager. Appflow's system status as well as network and security incidents are published at https://status.ionicframework.com/.

Yes. Depending on the severity, full system recovery objectives fall between 12 to 72 hours. In the event of system disruption, Ionic will communicate with customers immediately and until the issues are resolved.