Security built on Microsoft Azure — and explained plainly
InflowSheet runs entirely within the Microsoft Azure ecosystem. Your firm's documents are encrypted in transit and at rest, isolated to your firm, and reached through the identity controls you already govern in Entra ID. No third-party clouds. No data sold. No model training on your clients' documents.
Your clients' documents are among the most sensitive records a firm holds. You should know exactly where they go — so we tell you: InflowSheet processes and stores your data in our Microsoft Azure environment in the United States (US East), and integrates with your Microsoft 365 tenant through permissions your administrator explicitly approves and can revoke.
Processed and stored in our Azure environment in the US East region. No third-party clouds.
TLS between your users, the platform, and integrated services. Encrypted at rest in Azure storage.
Each firm's data is logically separated. Engagements, documents, and threads stay within your firm's environment.
When your people sign in with Microsoft, your Entra ID SSO, MFA, and Conditional Access policies apply.
Your administrator approves every Microsoft Graph permission before connection — and can revoke them at any time.
AI runs on Azure Document Intelligence and Azure OpenAI. Your clients' documents are never used to train models.
Checkable, not decorative.
A short, published subprocessor list. Microsoft and DocuSign — that is the entire list, and it is in our Privacy Policy where you can check it.
Identity you already govern. Microsoft sign-in means your Entra ID SSO, MFA, and Conditional Access policies apply to InflowSheet.
Auditability. Signers and signing status are recorded on every envelope, and everything the agents do unattended is logged.
Straight answers on data residency. Your data lives in our Azure environment in US East. Ask us anything about it.
What we don't claim
InflowSheet does not currently hold a SOC 2 report or ISO 27001 certification. We will say so when that changes, rather than implying it before.
Your documents are processed and stored in our Azure environment — not confined to your Microsoft 365 tenant. That is what lets the platform do its work, and we would rather be clear about it than describe it loosely.
AI-assisted extraction and summarization can be wrong. Every output is meant for professional review, not for reliance without it.
Questions from your security team? Send them to info@inflowsheet.com — we answer questionnaires directly. Full detail lives in the Privacy Policy and Terms of Service.