Identity and sign-in
Authentication runs through Auth0 (an Okta product) for single sign-on. Auth0 handles your login session; it doesn't see your Jira or ClickUp data.
Hosting and infrastructure
CostFlow's application and database run on Railway. Railway hosts the infrastructure; it doesn't have a separate relationship with your imported work-tracking data beyond storing it encrypted on our behalf.
What we don't have (yet)
No third-party analytics processor, no marketing/CRM platform connected to product data, no data broker relationships, no resale of any data to anyone, for any reason.
A note on completeness
This list reflects what's actually confirmed in CostFlow's architecture today. As the product grows, email delivery and error monitoring are the likely next additions, and this page will be updated before those services touch any customer data, not after. If your legal or security team needs a formal Data Processing Agreement ahead of a vendor review, email support@fbx1.com and we'll work through it directly.