Trust and data

The questions your auditor will ask.

Direct answers about data location, records, exports and AI use. Where a decision has not been made yet, it is marked UNKNOWN rather than answered with a claim. No compliance with any standard or certification is claimed on this page.

Where is data stored?

SafetyFlow data is stored in the EU region.

  • Incident records, inspections, corrective actions and uploaded photos are held in EU-hosted infrastructure.

UNKNOWN — to be confirmed before general availability. The specific EU country, sub-processor list and data-processing agreement wording are UNKNOWN.

How long are incident records retained, and who can delete them?

Records are retained for the life of your account and are not deleted automatically.

  • During the Founding Customer Pilot, no record is removed by SafetyFlow on its own initiative.

UNKNOWN — to be confirmed before general availability. The default retention period, configurable retention windows and which customer roles may delete a record are UNKNOWN.

Is the incident timeline immutable, and what does that mean in practice?

The intent is an append-only timeline: corrections are added as new entries rather than overwriting earlier ones.

  • In practice that means an edited narrative, a reclassified severity or a reassigned action shows as a dated change on top of the original entry, with the earlier value still readable.

UNKNOWN — to be confirmed before general availability. Whether any entry can ever be hard-deleted, and by whom, is UNKNOWN.

Can records be exported for an inspection or audit?

Yes. Incident, inspection and corrective-action records can be exported from the account.

  • An export is intended to be produced by the customer, without asking SafetyFlow to run it for you.

UNKNOWN — to be confirmed before general availability. The exact export formats, whether photos and attachments are included in a single package, and bulk full-account export are UNKNOWN.

What is AI used for, and what is it never used for?

AI drafts incident narratives and corrective-action (CAPA) suggestions. A human approves every record.

  • AI never closes a corrective action on its own.
  • AI never classifies incident severity on its own.
  • Every AI-produced text is a draft until a named person in your organisation accepts it.

Who is accountable for the accuracy of a record?

The employer, always.

  • SafetyFlow is a record-keeping tool. It does not assume any duty of the employer, and it does not verify that what was entered reflects what happened on site.