Customer-environment first
Where the architecture supports it, FlowScript prefers Power Platform deployments that keep operational data and application components within the customer's Microsoft environment rather than copying business data into an unnecessary external service.
Least access needed
Connections, permissions and service accounts should be limited to the systems and actions a solution actually needs. Exact access requirements depend on the product, connectors and customer configuration.
Sensitive data
Do not send credentials, protected health information, payment-card data or other highly sensitive information through ordinary email or the public project form. Customer deployments that handle regulated or sensitive data require environment-specific review and configuration.
Deployment lifecycle
FlowScript's product direction includes managed solution practices, environment configuration, documented dependencies and repeatable deployment rather than unmanaged personal builds. Formal product security documentation will expand as products reach broader availability.
Report a security concern
Send security-related reports to paul@flowscripthq.com. Do not include live credentials or sensitive customer data in the initial message.