Does UpFlux train AI on my data?

No. We do not train models on client data. Each client operates in a segregated environment, and the data remains under the client's ownership.

How do the agents write to the ERP?

Writing to the ERP happens only through agents with a declared scope, an approval limit configured by the client and a complete audit trail for each decision. Outside that approval limit, the action is blocked automatically.

Does UpFlux comply with the LGPD (Brazil's General Data Protection Law)?

Yes. We operate in accordance with Law No. 13,709/2018, with a designated DPO and a public LGPD channel and Ombudsman for exercising data subject rights and reporting incidents.

Security, LGPD & Architecture

Built to pass your security team's review.

Architecture, data and AI governance, documented for review by your IT, information security and DPO.

Data

Your data stays yours: we do not train models on client data. Per-client segregation, and encryption in transit and at rest.

LGPD

Processing under the LGPD (Brazil's General Data Protection Law), Law No. 13,709/2018, with a designated DPO and a dedicated channel. Public LGPD Portal and Ombudsman for exercising data subject rights.

Integration

Ready-made connectors for TOTVS Protheus/Datasul, SAP and hospital systems. Structured event reading, and ERP writes only by agents with scope, approval limits and an audit trail.

AI governance

Every agent decision is traceable: context, rule, cost and outcome, with native agent mining. Automatic blocking outside the approval limit.

Operations

Enterprise cloud, continuous monitoring, RBAC and SSO. Practices aligned with market standards for access management and availability.

Compliance

Public whistleblowing channel and Ombudsman, handling data subject rights and incident notification within legal deadlines.

Official channels

For exercising data subject rights, reporting incidents or LGPD questions:

LGPD Portal: lgpd.upflux.ai
Ombudsman: ouvidoria.upflux.ai
DPO (Encarregado): lgpd@upflux.com.br
Information Security Policy (PSI v16): download PDF (in Portuguese)

In the event of a security incident, we notify the data subjects and the ANPD (Brazil's National Data Protection Authority) within legal deadlines.

Need the technical package for your review?

Talk to us, and we will send the architecture, integration and AI governance documentation in the format your committee uses.

Talk to us