Heyflow is made in Germany and our data centers are exclusively located in the EU. We are trusted by thousands of marketing and product teams in more than 60 countries already, and rightly so: to fully comply with the regulations of the European Union, like GDPR, we take all necessary measures, such as yearly penetration tests and being ISO 27001 certified. Anything to keep your data safe.

ISO 27001 is the international standard that certifies the information security management system of a company. Heyflow has been ISO 27001 certified since November 2022. Hereby, we take a further step towards ensuring a sustainable and conscious approach to IT security and data protection.

With the Sensitive Tag, Heyflow is going the extra mile when it comes to GDPR-friendly data collection. It’s a simple toggle that allows you to decide which data you don’t want to have stored on Heyflow’s servers. To make it even easier for you to comply with GDPR regulations, we have introduced a new toggle in the flow settings. This feature enables automated mass deletion of all user data after a specified period of time, ensuring hassle-free management of user information.

Matomo is a GDPR-compliant Google Analytics alternative that is especially popular with EU-based Heyflow customers. Connect your heyflow to Matomo to track visits to your flow and get detailed insights into user behavior.