Privacy, security & compliance
Ominiflow is built with GDPR in mind — cookie consent, documented privacy practices, and a Data Processing Agreement available for EU customers — alongside certified information security management.
Last Updated: July 18, 2026
|Version: 2.2.0
Platform compliance
ISO 27001
ISO/IEC 27001:2022 Certification — our information security management system is independently audited against this international standard.
GDPR-aligned
Supports GDPR requirements for EU customers: privacy documentation, cookie consent on our website, and a DPA available on request.
Request our ISO/IEC 27001:2022 certificate summary, review the DPA & Subprocessors page, or speak with our security team about regulated-industry deployments.
01 Introduction
At Ominiflow enterprises, we take security seriously. This Security Policy outlines the measures we implement to protect your data and ensure the security of our Service.
This policy complements our Privacy Policy and Terms and Conditions. Our security framework is built on industry best practices to ensure continuous protection against evolving threats.
02 Company Information
Legal Entity
Ominiflow enterprises
HQ Address
18 Tarani Colony, Dewas, Madhya Pradesh 455001, India
GSTIN: 23BMKPN8756M1ZA
Contact Email
Emergency Support
+91 9243747854
03 Data Encryption
sync_alt 3.1. Encryption in Transit
- check_circle All data transmitted between your device and our servers uses TLS 1.2 or higher
- check_circle HTTPS is enforced for all web traffic
- check_circle WhatsApp API communications are secured through Meta's encryption
encrypted 3.2. Encryption at Rest
- check_circle All stored data is encrypted using AES-256 encryption
- check_circle Database encryption protects sensitive information
- check_circle Encryption keys are managed securely and rotated regularly
04 Infrastructure Security
cloud_queue Cloud
- • Regular security audits
- • DDoS protection & mitigation
- • Network segmentation
- • Intrusion detection systems
dns Server
- • Hardened server configurations
- • Minimal attack surface
- • Secure boot integrity checks
- • 24/7 monitoring and alerting
05 Access Control
5.1 Authentication
Multi-factor authentication (MFA) availability, strong password requirements, and OAuth 2.0 implementation for third-party integrations.
5.2 Authorization
Role-based access control (RBAC) and the principle of least privilege are strictly followed for all systems.
5.3 Employee Access
Background checks, continuous security training, and immediate revocation of access upon termination.
06-11 Operational Security
Compliance Frameworks
Ominiflow is certified to ISO/IEC 27001:2022 for information security management. Our privacy and data-handling practices are GDPR-aligned and designed to support EU customer requirements (including a Data Processing Agreement on request), and we also address key CCPA expectations. All vendor assessments and third-party integrations (OAuth 2.0) undergo rigorous security vetting. See our DPA & Subprocessors and Privacy Policy for details.
Data Protection (Section 6), Monitoring (Section 7), Incident Response (Section 8), and Vulnerability Management (Section 9) are handled by our dedicated security team through automated threat detection and 24/7 monitoring capabilities.
13 Your Responsibilities
verified_user Security Best Practices
- arrow_forward Use strong, unique passwords
- arrow_forward Enable multi-factor authentication
- arrow_forward Report security issues immediately
- arrow_forward Keep devices and software updated
Security Reporting
If you discover a security vulnerability, please report it responsibly. We take every report seriously and investigate all findings.
Email Us
Details Required
Steps, impact & proof
Have questions about our security measures? Read our FAQ or Talk to an expert.