Mouseflow

Documents on the trust centre

What the vendor lists, typed; public items can be read now, the rest are available on request.

What the vendor says

Answers the vendor publishes to questions buyers ask, quoted with the link to where it says so.

• Where data is hosted or processed

  Where are Mouseflow's servers located?

  “Mouseflow operates a distributed infrastructure to adhere strictly to regional privacy requirements, utilizing highly secure, professional-grade data centers in both the European Union ( EU ) and the United States ( US ). The Product Delivery Platform is hosted in data centers located in Belgium (EU) and Iowa (US), managed by Google Cloud Platform (GCP). Customer data is geographically segregated based on the loca...”

  Regions named: EU, USas of 21 Sep 2026Source

• Where data is hosted or processed

  Where can I find Mouseflow's Data Processing Agreement?

  “Mouseflow's Data Processing Agreement can be found here.”

  as of 21 Sep 2026Source

• Encryption

  Does Mouseflow encrypt data in transit and at rest?

  “Yes. All data stored within the Mouseflow platform is encrypted in transit using HTTPS and at rest using industry-standard AES256 encryption mechanisms provided by our cloud infrastructure. This helps ensure that data remains protected against unauthorized access.”

  as of 21 Sep 2026Source

• Penetration testing

  Are penetration and vulnerability tests performed by a third party?

  “Yes, Mouseflow incorporates multi-faceted external and internal testing methodologies to proactively manage platform security: 1. Annual Penetration Testing : Full penetration tests are conducted annually by specialized external auditors (Bugcrowd). This testing adheres to established international security frameworks, specifically the OWASP Testing Guide v3 standard. 2. Quarterly Vulnerability Scanning : External...”

  as of 21 Sep 2026Source