Data and ownership
Websites and business systems can hold real customer information. These are the plain-language rules I use when choosing tools and handing over a project.
Client site and app data lives in US-region managed services such as Vercel and managed Postgres providers like Neon or Supabase. The exact setup depends on the project. I document it before launch so you know what is running your business.
Your business data belongs to you. If you need to export content, leads, customer records, or project data, I make that possible and explain the format you will receive.
Ben has access when needed to build, support, and troubleshoot your project. Access uses per-client credentials. Sproutflow does not hand your client data to offshore contractors.
Managed hosting and database providers handle backups when their service includes them. If backups matter to daily operations, the project can include a written plan for snapshots, exports, and recovery before launch.
You can leave with your data. I help export the information you need, transfer ownership where the provider supports it, and remove Sproutflow access after the handoff is complete.
Before Sproutflow, Ben led SOC 2 Type II readiness from 34% to 100% as an SRE. That is professional experience, not a Sproutflow certification. Sproutflow Studio is not claiming to be SOC 2 certified.
If a project touches sensitive customer information, we will cover access, exports, backups, and responsibilities during scope.