Customers
Why regulated teams choose on-premise documentation software
Capture and processing run on your machine. No cloud dependency, no forced upload.
Documentation is stored on your system or network. Unless you explicitly choose to share it.
Developed and governed under strict German and EU data protection law.
Manufacturing, utilities, government, and enterprise IT, including offline and restricted networks.
Security by design
ISO/IEC 27001:2022 certified
The information security management system of miraminds GmbH and miraminds Inc. is certified to ISO/IEC 27001:2022.
Certificate number: 123361
That means: An accredited body has audited how we govern information security, risk assessment, access control, incident response, secure development, supplier management, business continuity and confirmed it meets the standard, with annual surveillance audits to maintain it.
Built with European data protection principles at its core.
ISMS certified to ISO/IEC 27001:2022, certificate 123361.
AI features run via trusted providers within EU infrastructure.
FlowShare runs entirely on your machine. Add the Portal when your team needs to share and manage guides centrally, still hosted in the EU, still under German data law.
Installed and operated inside your own infrastructure. Screenshots, workflows and process data are captured and processed on your machine, and stored on your system or network. Your documentation stays there. Captured screenshots, generated guides, process content, and the systems or data visible in them are not transmitted to us.
In desktop mode, no customer content or personal data is transmitted. Internet access is required only for license verification.
A hosted layer for teams that need to store, access and share guides created in the desktop application. It is optional, and it is not required to use FlowShare.
If you use the Portal, we additionally process minimal user identification data plus whatever content you choose to upload.
Some FlowShare features use AI. Here’s how that works.
On the free trial: AI features are enabled by default. If you need FlowShare running fully offline with no AI processing, contact us about licensing for that configuration.
No need to switch tools or document manually.
Everything you need is also available through our Trust Center
Security questionnaire or vendor assessment? Send it to support@getflowshare.com
miraminds GmbH and miraminds Inc are certified to ISO/IEC 27001:2022 for their information security management system, covering the design, development, maintenance, and cloud operations of FlowShare, delivered via web and desktop applications, including infrastructure hosted on Microsoft Azure and DigitalOcean. The certification was issued by Prescient Security LLC. ISO 27001 certifies a management system rather than a product; no software is “ISO certified” in itself. Our certificate is available in our Trust Center.
For a longer walkthrough of what this distinction means when evaluating any vendor, not just FlowShare, see our blog post on what ISO 27001 actually covers.
No. We hold ISO/IEC 27001:2022, the international standard for information security management. SOC 2 is a US-oriented attestation covering similar ground through a different framework. Our cloud infrastructure providers hold SOC 2 Type II reports for the infrastructure layer. If SOC 2 is a hard requirement for your procurement process, tell us and we’ll work through it with you.
Our infrastructure providers, Microsoft Azure and DigitalOcean, are independently audited against recognized frameworks including ISO 27001. Those are their certifications, covering the infrastructure layer, not certifications held by miraminds. Full detail and links are in our Trust Center.
No, not by default. FlowShare Desktop captures and processes your documentation locally. The application periodically checks your license key over the network, which transmits no documentation content. Data reaches the cloud only if you choose to use the optional Portal to publish or share a guide.
On your own system or network, if you use FlowShare Desktop. If you use the optional Portal, published content is stored in EU-based data centers.
Yes. FlowShare Desktop runs fully offline. Fully offline operation with no periodic network calls is also available. Talk to us about licensing for air-gapped and restricted environments.
Yes. FlowShare Desktop is installed and operated inside your own infrastructure. This is how FlowShare runs by default, not an alternative configuration.
Yes. FlowShare is used across manufacturing, utilities, government and enterprise IT, including offline and restricted networks.
Yes. We operate under a Data Processing Agreement covering Article 28 obligations, Technical and Organisational Measures, and EU-based hosting for the Portal. Data subject rights, including access, rectification and erasure, are supported. GDPR compliance is separate from our ISO 27001 certification; the two address different requirements.
The minimum needed to manage your subscription and licence: name (first and last), email address, and optionally phone number and job title. That’s the complete list for account administration. We do not collect your documentation content, and we do not sell or share personal data with third parties for marketing or advertising.
Some FlowShare features use AI, processed via Azure Open AI within EU infrastructure. Our AI providers are contractually prohibited from retaining your data or using it to train or fine-tune models. The Blur feature lets you mask sensitive information before it’s processed.
FlowShare includes bulk editing features such as blur and annotation tools to hide sensitive data across all steps. Since everything runs locally, sensitive data remains under your control.
Yes. You control how and where your documentation is shared, whether locally, within your organisation, or via integrations like SharePoint or Confluence.
Yes. When using the FlowShare Portal or integrations, you can manage access through roles, groups, and permissions.
FlowShare Desktop runs on your machine by default; cloud-based tools require your process data to leave your environment to function. Combined with a certified information security management system, this means your security team is reviewing an architecture designed for control, not a cloud service you’re asking them to trust.
