Skip to content Skip to footer
Login
Close

Naviflow Trust Center

Naviflow is an AI-powered shipment operations platform for importers, exporters and traders. It unifies orders, documents and logistics from purchase order to proof of delivery. Naviflow is built by AIC, drawing on more than 20 years of global commodities experience, and backed by BY Venture Partners.

This page sets out how Naviflow protects your data, its certification status, and the policies that govern the platform.

Compliance and roadmap

  • In place

    Operational controls

    AES-256, TLS 1.3, 2FA, EU data storage, tenant isolation, audit logging, BCP and DRP, and cross-region backups.

  • In progress

    ISO 27001 certification

    Formal ISO 27001 certification is underway.

  • In progress

    EU-hosted AI inference

    Moving AI inference to EU-hosted endpoints is on the active roadmap.

Policies and documents

Legal

Privacy and data

Service

Available on request

Request documents

How does Naviflow protect your data?

Last reviewed October 2026

Naviflow protects customer shipment data with AES-256 encryption at rest, TLS 1.3 in transit, EU data storage, tenant isolation, two-factor authentication and a complete workspace audit log, and never uses customer data to train AI models.

Platform security

Protection for your data in storage, in transit and between customers.

  • AES-256 encryption at rest
  • TLS 1.3 encryption in transit
  • Customer data stored in the EU
  • Tenant data isolation
  • Two-factor authentication
  • Granular document sharing

Resilience and recovery

Keeping the platform available and your data recoverable.

  • Multi-AZ database standby
  • Cross-region backups
  • Documented BCP and DRP
  • Regular continuity testing
  • 99.9% monthly availability
  • Breach notification within 72 hours

Access control and audit

Your admins decide who sees what, and workspace activity is logged.

  • Admin-controlled user management
  • Read-scoped access for third-party portals
  • Complete workspace audit log
  • AI assistant that respects each user’s permissions

Your data, your control

You own your data and can export your documents.

  • You retain ownership of your data
  • Your data is never used to train AI models
  • Full document export
  • History retained indefinitely, by design

Sub-processors

The third-party providers that process data on Naviflow’s behalf, and what each one does, are listed on the Sub-processors page.

View sub-processors

Updates

  • Trust Center launched

    Published October 2026

    This page brings Naviflow’s security controls, compliance status and policies together in one place.

  • ISO 27001 certification underway

    Published October 2026

    Formal ISO 27001 certification is in progress. We’ll post an update here when it’s complete.

Need a security review?

If your IT or procurement team needs security documentation or a completed questionnaire, email the Naviflow team and we’ll get back to you.

Email sales@naviflow.ai Book a demo

Frequently asked questions

Is my data used to train AI models?

No. Naviflow never uses customer data to train AI models. AI features process your data to answer questions and surface shipment information, and the assistant respects each user’s permissions.

Where is Naviflow data stored?

Customer data is stored in the EU, encrypted with AES-256 at rest and TLS 1.3 in transit. AI inference isn’t EU-hosted yet; moving it to EU-hosted endpoints is on the active roadmap.

Is Naviflow ISO 27001 certified?

Formal ISO 27001 certification is in progress. Naviflow already operates controls including AES-256 encryption, TLS 1.3, two-factor authentication, tenant isolation, audit logging, documented BCP and DRP, and cross-region backups.

This page summarizes the controls Naviflow operates. Contractual commitments are set out in your customer agreement and the Terms and Conditions.