Trust Center
Security, compliance, and legal documents.
Workiflow is SOC 2 Type II certified and the ISO 27001 audit is in progress. This page holds the security overview, the control register, and the legal documents a vendor review needs.
Download security posture PDFOne document for procurement
Compliance

SOC 2 Type II
Certified · Apr–Jul 2026 · report under NDA

ISO 27001
Coming soon · audit in progress
The documents
- Security overviewThe practices in place today, the SOC 2 Type II attestation, and the ISO 27001 work in progress.
- Privacy policyHow we collect, use, and protect your personal information when you use our services.
- Templify privacy policyHow our Templify app for monday.com collects, stores, and deletes your data, and how to review, update, or remove it.
- Terms of serviceThe terms that govern your use of Workiflow's services and platform.
- Data processing agreementThe GDPR data protection terms for clients whose personal data we process.
- Sub-processorsThe third-party sub-processors we use to deliver our services, with purpose and processing location for each.
- Security controlsThe full register: 69 controls across 10 domains, monitored continuously through our compliance platform.
Questions
The SOC 2 report is available under NDA.
The SOC 2 Type II report goes to clients and prospects under NDA. For the report, or for any other documentation a vendor review needs, email the security team and we send what we can.
Next step
Book a discovery call.
We look at your stack, say what we would fix first, and recommend how to work with us.
30 minutes. No commitment.