Flows for HIPAA / GovCloud customers

This article covers how Flows execute within HIPAA/GovCloud environments, data handling boundaries, and compliance requirements when using external connectors.

Important Compliance Notice for HIPAA & GovCloud Accounts

Flows built entirely with Knack triggers and actions — using only the Knack connector — are executed and contained within your secure HIPAA/GovCloud environment.

However, if your Flows include third-party triggers or actions (such as Gmail, Outlook, Slack, or QuickBooks), those external systems operate outside Knack's controlled environment. You are responsible for ensuring that any third-party integrations you use are covered by your own HIPAA-compliant agreements or Business Associate Agreements (BAAs) with those providers.

Important: Knack does not extend its HIPAA or GovCloud compliance guarantees to third-party systems or data transmitted to them.