Data security and IP protection FAQs
Flux encrypts your data during transfer and storage. Flux stores your data redundantly in data centers that have physical and virtual protection. This is the same protection that other cloud services use, such as GitHub, Figma, Salesforce, Dropbox, and Gmail.
Modern, cloud-native environments
The Flux infrastructure is cloud-native. The Flux security team uses the scale and flexibility of the cloud to protect your information. Flux runs on trusted cloud vendors, and a dedicated engineering security team protects it at all times.
Flux also uses these measures to keep your work and the work of your team secure.
Data protection
Flux encrypts your data at rest and in transit. Flux hosts its services redundantly in US-based data centers.
Identity management
Manage access with SSO and project-level permissions, and deploy Flux across your organization.
Service reliability
Flux runs on multiple data centers to keep the service available 24/7/365. Flux also gives you real-time status updates and a built-in version history.
Your privacy rights
Flux handles all customer and employee personal data in accordance with the EU’s General Data Protection Regulation (GDPR) and the California Consumer Privacy Act (CCPA).
Your data belongs to you
Flux keeps your information secure and private.
The Privacy Statement tells you which data Flux collects, how Flux collects and uses it, how you can opt out, and how you can get or delete your data.
FAQ
What are the security benefits of a cloud-native infrastructure?
Cloud-native environments provide a number of security benefits, including greater visibility and control over the access and usage of applications, reduced attack surface due to ephemeral compute services of cloud applications, and ensured data backup by cloud providers. Flux uses industry-standard cloud resources and the work of the cloud security community to protect your data.
How do I report a potential security vulnerability in Flux products?
To report a security issue, contact the Flux security team. You can also report bugs through the support chat in Flux. You can do your own penetration test if you follow the program rules: test only your own data, and report all findings to Flux first. If you have questions about the security program or its rules, contact the security team before you start a test.
What personal data does Flux access, store, or process from customers?
To provide its services, Flux collects limited personal information about users, including name, email address, job title, and, if you enable two-factor authentication, a phone number. You retain sole discretion over what you include in your designs on the Flux Platform. Flux also complies with all applicable data protection laws and regulations such as GDPR and CCPA. For more information, see the Privacy Statement.
Does Flux have any rights to my data?
You own all data that you upload to or develop on the Flux platform. Flux treats this data as your confidential information. To learn how Flux secures your data, read the Privacy Statement.
Can I export my full project?
Yes. You can export your complete project at any time. Ask Flux to export the files that you need.
To export the complete project as one file, open Flux menu → Export and select Flux project (.flx). For all export formats, see Export designs.
Who owns the designs I create with Flux, including AI-generated designs?
You own the content you create in Flux. This includes designs that Flux generates from your inputs. Flux does not claim ownership of your content.
Who has access to my projects?
New projects are private. You choose who can access a project: in the Share dialog, invite other people or make the project public. For more information, see the Privacy Statement.
Does Flux train the AI with my data?
No. Flux does not train AI models on your data. Your inputs and outputs remain your intellectual property. To learn how Flux handles your information, see the Privacy Statement.