Security

Your clients' content, kept separate and safe.

Float runs many brands and customers in one workspace, so isolation and access control are built into how it works, not bolted on. Here is our approach, honestly, including what we are still building.

Per-brand isolation Encrypted in transit Role-based access Audit trail

How we protect your work.

The practices that keep every brand's content, and every client's trust, where it belongs.

Per-brand and per-customer isolation

Every brand and customer is a separate space. One client's content is never visible to another.

Encryption in transit

Traffic is served over HTTPS with modern TLS. Credentials are never sent in the clear.

Role-based access

Owners, managers, editors, and clients each get only the access their role needs, scoped per brand.

Audit trail

Key actions, including approvals, are recorded so there is a clear history of who did what.

Secrets kept server-side

API keys and tokens live in server configuration, never exposed to the browser or stored in content.

Least-privilege vendor access

AI and infrastructure vendors receive only the data a task needs. See the sub-processors list.

Where your data goes.

A simple path, with only what each step needs.

You

You provide a capture

A recording, a doc, or a prompt lands in your isolated brand space.

Float

Float processes it

Your content is stored in your space and prepared for the formats you asked for.

Vendors

Tasks call vendors

Specific jobs go to AI vendors with only the data needed. See the list.

To request deletion of your data, see the data deletion page.

Working toward

What we are still building

We would rather be clear about what is in progress than overclaim. These are on the roadmap, not yet available.

SSO and SCIM for Enterprise workspaces.
SOC 2 reporting as the platform matures.
Third-party penetration testing ahead of general availability.
In-product data deletion flow, alongside the request path today.

Found something? Tell us.

We take security reports seriously and want to hear from you. If you believe you have found a vulnerability, reach out and we will respond quickly and work with you in good faith.

Responsible disclosure

Send details of the issue and how to reproduce it. Please give us reasonable time to fix it before any public disclosure.

Report an issue

Security your clients
can take for granted.

Run every brand in its own space, with the access controls a client relationship needs. Free to start, no card required.

One capture · Every channel · On schedule