Why data sovereignty?
Anyone working with participants processes personal data — names, contributions, poll answers. For publicly funded and public-interest organisations it is increasingly a requirement that this data stays in the EU, is governed by European data-protection law and is not exposed to access by third countries. flow present is built exactly for that.
Where your data lives
| Database, auth, storage | Supabase, EU servers (Frankfurt, AWS eu-central-1), ISO 27001 certified. Data-processing agreement (DPA) under Art. 28 GDPR. |
|---|---|
| Application hosting | Vercel, EU region. |
| Error monitoring | Sentry, EU region (Germany/Frankfurt). |
| Live translation | LibreTranslate, self-hosted — can run entirely without an external translation service. |
| Open source | The core of flow present will be released under AGPL-3.0 (opening planned after a code review) and will then be fully self-hostable. |
All processing and processors are listed transparently in our privacy policy.
What that means for you
- No US-cloud dependency for your participants' data.
- DPA available — important for schools, universities and public authorities.
- Verifiability through open source — the code is auditable, no black-box vendor.
- Self-hosting perspective — maximum control for organisations with their own IT.
Frequently asked questions
Is flow present GDPR-compliant?
Yes. Data processing takes place on EU servers, there is a data-processing agreement under Art. 28 GDPR, and all processors are listed in the privacy policy.
Where is my data stored?
On EU servers in Frankfurt (AWS eu-central-1, via Supabase, ISO 27001 certified).
Is flow present open source?
The core of flow present will be released as open source under AGPL-3.0 (opening planned after an independent code review). Details on the licence page.
Can we self-host flow present?
The core is designed to be fully self-operable once it has been released.
Data-sovereign workshops — with no compromise on features.
Start for free