Skip to main content

Security and data handling

Security and data handling, stated plainly.

Flock is built around evidence-backed synthetic UX reviews. This page separates the public marketing site from product review processing and states what is true today.

Current state

Practical controls and clear limits.

No SDK required for URL-based reviews

Flock can review a public, preview, or staging URL without asking teams to add an SDK or install an analytics pipeline.

Automated review processing

Runs are processed by automated browser agents and model-assisted analysis, not human reviewers, unless you request support.

Browser state is discarded

Browser session state is discarded after processing. Generated review artifacts remain available for workspace review until deleted or as agreed in beta terms.

No formal compliance claim on this site

We use industry-standard practices and data-minimization choices, but we are not making SOC 2 or formal certification claims here.

How data moves

What we collect and what Flock does not require.

URL-based reviews are designed to produce inspectable product evidence without requiring customer-side instrumentation.

Marketing site

Static public site. Waitlist submissions collect only the fields shown in the form. No passwords or payment details are collected through the waitlist.

URL-based runs

You provide a URL, persona, and goal. No real customer session recordings or actual end-user PII are required for URL-based run processing.

Review artifacts

Artifacts can include reports, screenshots, DOM excerpts, page text, console output, network signals, traces, prompts, and findings.

Retention

Artifacts are retained in your workspace for review, baseline comparison, and replay until deleted or as agreed in beta terms.

Access

Reports are scoped to the workspace. Support review happens only when requested.

Transport

Encrypted in transit

Site and product traffic uses HTTPS/TLS. We avoid asking teams to send production end-user session recordings for URL-based review processing.

Providers

Processing is limited to operating the review

Run inputs and generated context may be processed by infrastructure and model providers solely to operate the requested review.

Deletion

Deletion requests are supported

You can request deletion of waitlist submissions or private-beta run artifacts by emailing support@flocksynthetics.com.

Need a specific data-handling review before beta access?

Send the surface you want tested and any constraints that matter. We will confirm the handling details before enabling private or authenticated workflows.

Contact support