Your tenant. Your files. Your controls.
FigsFlow sits on the Microsoft stack your firm already governs. Identity, retention, encryption and access controls stay where your IT put them.
- Documents in your SharePoint
- Sign-in through Entra ID
- Every action logged
Security is inherited, not bolted on.
If your IT governs identity and retention centrally, FigsFlow inherits it rather than asking for an exception.
Entra ID single sign-on
Your existing MFA, conditional access and session policies apply. No separate password to govern.
Documents in your SharePoint
Proposals, engagement letters and work files are written into your own tenant, under your retention policy.
Encryption at rest and in transit
TLS 1.2+ in transit. AES-256 at rest, with keys managed in Microsoft Azure.
Role-based access
Partners, managers and team members see what their role requires. Permissions follow your organizational chart.
Audit trail
Every action is logged with who, what and when. Exportable for your compliance program.
Canadian privacy, considered
Built to support your obligations under PIPEDA and the provincial privacy laws of Quebec (Law 25), British Columbia and Alberta.
Most of it never leaves your tenant.
Client files, mail and identity stay inside the Microsoft 365 tenant your firm already controls. FigsFlow keeps only the working records it needs to run the job.
Governed by your IT
- Proposals, engagement letters and work files, in your own SharePoint
- Sign-in through Microsoft Entra ID, under your policies
- Retention set by your firm, not by us
- Outlook threads linked to the client record, not moved
Working records, protected
- Client records, jobs, deadlines and the audit trail
- Encrypted in transit (TLS 1.2+) and at rest (AES-256)
- Access limited by role, at the firm level
- Every action logged with who, what and when
Need hosting and backup detail? Ask for it in a security walkthrough and we’ll answer your IT team directly.
A security review with a person, not a portal.
Firms trust their clients’ information to the tools they choose. So before you choose, you can put every question to someone who can answer it.
- 01Book a walkthrough
Ask for a security walkthrough when you book a demo, and bring whoever looks after your IT.
- 02See how it fits together
We can provide architecture documentation and data flow diagrams for your review.
- 03Get straight answers
Hosting, backups, access and retention — your team’s questions answered directly, not by a form.
Federal and provincial, considered from the start.
Canadian firms answer to more than one privacy regime. FigsFlow is built to support the ones your clients’ information falls under.
PIPEDA
Personal information handled in the course of commercial activity, across most of Canada.
Law 25
Quebec’s modernized private-sector privacy law, for firms with Quebec clients or staff.
BC PIPA
The Personal Information Protection Act for private-sector organizations in BC.
Alberta PIPA
The Personal Information Protection Act for private-sector organizations in Alberta.
Your firm remains responsible for its own privacy obligations. FigsFlow supports them with role-based access, an exportable audit trail and documents kept in your own Microsoft tenant.
Security questions.
Questions about how FigsFlow protects your data?
Book a call with someone who can walk through the architecture, the controls and the audit trail.