TRUST CENTRE / DEVELOPMENT STAGE
Trust needs specifics.
What the architecture specifies, what the security programme has not yet completed, and what you can request for review.
Architecture is not an assurance report.
| Area | Status | What it means |
|---|---|---|
| Customer-cloud runtime | Specified; in development | AWS and Azure architecture targets. No generally available runtime or pilot. |
| Architecture review | Available by conversation | Specification under NDA and founder-led design review. |
| Independent penetration test | Planned before GA; not started | No completed report is claimed. |
| SOC 2 | Roadmap | No report, attestation or certification is claimed. |
| Automated evidence export | Planned product capability | No live workflow record is presented on this site. |
Two different data boundaries.
Website enquiries
The intended website uses Vercel for hosting, Resend for delivery and Cloudflare Turnstile for form verification when enabled. Online collection remains disabled pending approved notices and configured services. No analytics, advertising or newsletter tools are installed.
Studio and workflow execution
Studio is not operating as a customer service yet. There is no active Studio subprocessor list to assert. The specified runtime boundary is your cloud account; provider terms, regions and network paths require deployment-specific review.
Website delivery providers are not a claim about customer workflow processing.
Request the review material.
Start with a short call, then a mutual NDA and a pack assembled for your reviewers. Review the boundary, identity model, worker isolation, policy path and evidence format against your use case.
Report a security concern.
Contact hello@taskflo.ai to arrange a private conversation. Do not send exploit details, credentials or personal data in the first message. A dedicated disclosure policy, monitored security mailbox and response commitments will be published after approval.
ONE WORKFLOW. A CLEAR NEXT STEP.
Bring your hardest reviewer.
Tell us about the process, the systems and the people. Let’s work through what it would take to run it.