Encryption & Privacy

FlawDesk encrypts the sensitive content in your workspaces. Only the members of that workspace can read it — nobody else, not even FlawDesk.

What is encrypted

• Ticket descriptions and steps
• Comments
• Custom field values
• Notification previews in your inbox
• Imported email content

Encryption uses a separate key per workspace, sealed individually for each member. None of it is stored in plain text in the database.

What is intentionally not encrypted

To keep search and the UI fast, some metadata stays readable — such as ticket titles and numbers, status, priority, labels and timestamps.

Who can read it

Everyone in your workspace — a team works together by design. Anyone without access to the workspace sees nothing: in the database, in backups, and on server access the content exists only encrypted — there is nothing there for FlawDesk to read either.

If you lose access

• Recovery code: During setup you receive a recovery code. Keep it safe — it lets you restore your own access.
• Workspace owner: If that does not help, the owner of your workspace can restore your access.
• If neither works, the content is permanently lost — that is the price of nobody else being able to read it.