EN
Try for free

Security and GDPR

Secure from login to deletion.

Two-factor authentication, roles and private channels. Personal data is masked before anything goes to AI, and the GDPR tools are one click away.

Try it free for 14 days See the masking

  • Two-factor authentication
  • Roles and private channels
  • Masking before AI
  • GDPR tools

Before anything goes to AI

Personal data is masked – automatically.

Swedish personal identity numbers (personnummer), card numbers and IBANs are replaced before text is sent to AI. Scroll and watch the scanner at work.

Hi! My personal identity number is 19900101-1234••••••••-•••• and I’d like to change my booking.

I paid with the card 4242 4242 4242 4242•••• •••• •••• •••• but never got a confirmation.

Please refund it to SE45 5000 0000 0583 9825 7466SE•• •••• •••• •••• •••• ••••.

Sent to AI

Hi! My personal identity number is ••••••••-•••• and I’d like to change my booking.

I paid with the card •••• •••• •••• •••• but never got a confirmation.

Please refund it to SE•• •••• •••• •••• •••• ••••.

Try it yourself

Two-factor authentication – in a few seconds.

With backup codes and trusted devices for 30 days. You can make it mandatory for everyone.

Enter the code from your app

Enter the code from your app

Signed in

The code in this example: 482913

Roles

Everyone sees what they should.

Choose a role and see what it can access. Private channels aren’t visible even to the owner.

The inbox

All channels

Private channels

Members only

Projects

Access

Simplified overview. Permissions are controlled per channel and role in Blixtflow.

Under the surface

Protection in every layer.

  1. Sign-in

    Bot trap, timing check and growing delays. The account is locked after five failed attempts. Automatic sign-out when inactive.

  2. Passwords and keys

    Passwords are stored with Argon2id. Keys and attachments are encrypted.

  3. Email

    Emails are displayed in isolation and tracking pixels are blocked.

  4. Companies and support

    Companies are completely isolated from each other. Support only through a logged support mode.

  5. AI

    Personal data is masked before AI, and a monthly cap keeps costs in check.

GDPR

The GDPR tools – built in.

  • Data export

    Pull together everything about a person in one click.

  • Forget this person

    Delete a person’s data in the contact panel.

  • Retention period

    Old tickets are cleared out automatically after the period you choose.

  • Data processing agreement (DPA)

    Accepted right in the app.

  • Sub-processors

    The list is in the app.

  • Only essential cookies

    No tracking cookies.

In short

How does Blixtflow protect customer data?

Blixtflow, the help desk from Blixtgo Agency AB, protects customer data in several layers: two-factor authentication and login protection, roles and private channels, isolated companies, passwords stored with Argon2id, and encrypted keys and attachments. Swedish personal identity numbers (personnummer), card numbers and IBANs are masked before text is sent to AI. For GDPR there are data exports, “Forget this person”, a retention period you choose and a data processing agreement (DPA) that you accept in the app.

Last updated October 2026

Facts about security in Blixtflow

Sign-in
Two-factor authentication with backup codes, trusted devices for 30 days, lockout after five failed attempts
Roles
Owner, admin, team lead, team member, customer and Projects only
Private channels
Not visible even to the owner
Isolation
Companies are completely isolated; support only through a logged support mode
Encryption
Argon2id for passwords, encrypted keys and attachments
AI
Personal identity numbers, card numbers and IBANs are masked before AI
GDPR
Data export, “Forget this person”, retention period and data processing agreement (DPA)
Cookies
Essential only

Secure from day one

  1. 1

    Invite people with roles

    Everyone only sees their own channels.

  2. 2

    Turn on two-factor authentication

    For yourself – or make it mandatory for everyone.

  3. 3

    Set the retention period

    Old tickets are cleared out automatically.

Try it free for 14 days

Questions and answers

Common questions about security and GDPR

Does Blixtflow have two-factor authentication?

Yes, with backup codes and trusted devices for 30 days. You can make it mandatory for everyone.

Is personal data sent to AI?

Swedish personal identity numbers (personnummer), card numbers and IBANs are masked before text is sent to AI.

Can the platform’s support team read our tickets?

Only through a logged support mode – and never private channels.

How do we handle GDPR requests?

With “Data export” and “Forget this person” in the contact panel. You choose the retention period yourselves.

Is there a data processing agreement?

Yes, a data processing agreement (DPA) that you accept right in the app. The list of sub-processors is there too.

What happens after many failed sign-in attempts?

Sign-in is delayed more and more, and the account is locked after five failed attempts.

Does Blixtflow use tracking cookies?

No, only essential cookies.

14 days free

Try it with real customers. Then decide.

Connect your email and website chat in minutes. No installation, no credit card. After 14 days, the choice is yours.

  • No credit card
  • No lock-in
  • Nordic support

You’ll get an email with a link to set your password.

Book a walkthrough