Flip Raises $25 Million to Bring AI to Deskless Workers.
Read full press release.Flip is a secure employee app for frontline teams. It is ISO 27001 and SOC 2 certified, fully GDPR compliant, and hosted in an EU data center in Germany. Data in transit is encrypted to TLS 1.3, and the app cannot see or control anything private on an employee's phone. Security teams get enterprise controls, employees keep their privacy, and neither has to compromise. Named a Leading Product and AI Innovator in the ClearBox 2026 report.
Trusted by leading frontline organizations worldwide
The solution
Flip is built on data minimization: collect only what is necessary, and nothing more. That principle is the reason the app can be handed to a works council and to a security team on the same day.
How Flip processes your data is governed by a Data Processing Agreement, and Flip provides its template for review before you sign. In line with GDPR, Flip honors every request to correct, delete or copy the data it processes, and it holds its own DPAs with all of its sub-processors, so the chain of accountability does not stop at Flip.
Flip secures data processing through the technical and organizational measures set out in the GDPR: mandatory security training for employees, regular third-party audits, two-factor authentication, firewalls, virus protection and disk encryption. These measures are not set once and forgotten. They are reviewed and tightened on a continuous cycle.
The only personal data required to set up an account is a first and last name, a user ID and a role, either admin or user. Everything else, a password reset email, a job title, a region or a phone number, is optional. Less data collected is less data to secure, less to explain in an audit, and less at stake if anything ever goes wrong.
Certification and hosting
Company data is protected at three points: where it is stored, while it moves, and at the moment someone signs in.
Flip processes and stores your data in an ISO 27001 certified data center in Germany that meets the Cloud Computing Compliance Controls Catalog (C5) standard. Hosting runs on the Azure cloud in Frankfurt and Berlin, so data stays inside the European Union. For any organization that answers to EU data-sovereignty and regional compliance requirements, the location of the server is not a detail, it is the requirement.
Data moving between end devices and the data center is encrypted to the current state of the art: TLS 1.3, RSA 2048 bit, SHA256 with RSA, and HTTP Strict Transport Security. Independent third parties check the security of the app on a regular basis, and summaries are available on request.
Flip uses OIDC (OpenID Connect) and OAuth to handle authorisation and authentication. For every individual HTTP request, the JSON Web Token signature is matched against the user's public key in the API gateway, so a session cannot be quietly reused or forged. Employees sign in once with single sign-on and a secure frontline login, part of Flip's Frontline Identity access management suite, which was built for people who have no corporate email address and cannot be reached by a standard SSO tool.
'The app allows us to communicate directly, securely, and easily with our colleagues. And all this with our private smartphones.'
Most security decisions ask someone to give something up. Frontline security usually asks the employee to give up privacy and the employer to give up adoption. Flip is built so neither side has to.
Flip meets rigorous enterprise requirements out of the box. The platform is hosted on EU servers with ISO 27001 certification, messages are stored locally, and independent third parties audit it regularly. It is fully GDPR compliant, with nothing to bolt on later.
Equipping a large workforce with company phones is expensive, and employees are understandably reluctant to let an employer onto their personal device. Mobile App Management resolves the standoff: the employer manages the Flip app and only the Flip app, while the employee keeps full control of everything else.
A works council can accelerate a rollout instead of slowing it, once the protections they care about are already in the product. Flip was developed in partnership with frontline employees and workers' groups, so it arrives pre-fitted: it cannot access private smartphone data, it collects minimal employee data, and it can be muted outside working hours. The conversation starts from agreement rather than suspicion.
Feature | What it does | For |
|---|---|---|
Privacy by design | Core features need only minimal data. Name and phone number are optional. | Employees |
Do not disturb | Silence the app outside working hours, at weekends, and on holiday. | Employees |
SSO and auto-lock | Log in once to reach every tool, and resume with fingerprint or Face ID. | Employees |
App-only access | Employers cannot see or control private smartphone data. Employees decide what they share. | Employees |
Malware detector | Flip scans every file on upload, blocks and deletes malicious files, and notifies the user. | Both |
Content moderation | Any user can report offensive messages, posts, and comments. | Both |
Mobile App Management | Remotely manage access, security, and updates for an app users accept. | Employers |
TLS 1.3 encryption | State of the art encryption for data in transit between devices and Flip. | Both |
Hosted in Europe | ISO 27001 certified data center in Germany, meeting the C5 standard. | Employers |
100% GDPR compliant | Flip and all its data processing partners comply with GDPR. See the Trust Center. | Employers |
Independently audited | Independent third parties continuously stress test the platform. Summaries on request. | Employers |
Root detection | Safeguards sensitive data from compromised devices. | Employers |
Works council supported | Built with works councils, so employee needs are already covered. | Both |
Roles and permissions | Every employee sees only what they should. Segment by department, seniority, and more. | Employers |
FAQ
Frequently asked questions about privacy and security
A secure employee app is a communication and workplace platform for frontline and deskless staff that protects company data and employee privacy at the same time. In practice that means enterprise certifications (ISO 27001, SOC 2), GDPR compliance, EU data hosting, encryption in transit, single sign-on, and a strict boundary that keeps the employer out of an employee's private phone. Flip meets each of these criteria as standard.
Yes. Flip is fully GDPR compliant, and so are all of its data processing partners. Flip signs a Data Processing Agreement with every customer, holds DPAs with its own sub-processors, and honors every request to correct, delete or copy personal data. Full details are in the Flip Trust Center.
Flip hosts and processes data in an ISO 27001 certified data center in Germany, on the Azure cloud in Frankfurt and Berlin. Data stays inside the European Union, which protects data sovereignty and meets regional compliance requirements including the C5 standard.
Yes. Flip cannot see, access or control anything private on an employee's phone. Through Mobile App Management the employer manages only the Flip app, while the employee keeps full control of their personal data. The app can also be muted outside working hours.
Flip is ISO 27001 certified, SOC 2 certified and GDPR compliant, and it hosts data in a C5 compliant data center. Independent third parties audit the platform continuously, and summaries are available on request.
Data moving between user devices and the Flip system is encrypted to current standards: TLS 1.3, RSA 2048 bit, SHA256 with RSA, and HTTP Strict Transport Security. Authorisation and authentication use OIDC and OAuth, with a JSON Web Token signature verified for every request.
Flip was developed in cooperation with works councils and frontline employees, so the protections they care about are built in by design: minimal data collection, no access to private smartphone data, and the ability to mute the app outside working hours.
Tell us your goals, get your questions answered, and receive expert guidance on a 30 minute call. Book a demo.
