Security starts with architecture.

FlowScript is building toward customer-ready Power Platform products and consulting practices that minimize unnecessary data movement, preserve tenant controls and make deployment decisions explicit.

Customer-environment first

Where the architecture supports it, FlowScript prefers Power Platform deployments that keep operational data and application components within the customer's Microsoft environment rather than copying business data into an unnecessary external service.

Least access needed

Connections, permissions and service accounts should be limited to the systems and actions a solution actually needs. Exact access requirements depend on the product, connectors and customer configuration.

Sensitive data

Do not send credentials, protected health information, payment-card data or other highly sensitive information through ordinary email or the public project form. Customer deployments that handle regulated or sensitive data require environment-specific review and configuration.

Deployment lifecycle

FlowScript's product direction includes managed solution practices, environment configuration, documented dependencies and repeatable deployment rather than unmanaged personal builds. Formal product security documentation will expand as products reach broader availability.

Report a security concern

Send security-related reports to paul@flowscripthq.com. Do not include live credentials or sensitive customer data in the initial message.